zelari-code 1.31.0 → 1.32.0

package/dist/cli/main.bundled.js

@@ -395,7 +395,7 @@ async function refreshGrokToken(options) {
   return parseTokenResponseBody(obj, accessToken);
 }
 async function openBrowser(url2) {
-  const { spawn: spawn13 } = await import("node:child_process");
+  const { spawn: spawn14 } = await import("node:child_process");
   const cmd = (() => {
     switch (process.platform) {
       case "darwin":
@@ -408,7 +408,7 @@ async function openBrowser(url2) {
   })();
   return new Promise((resolve3, reject) => {
     try {
-      const child = spawn13(cmd.bin, cmd.args, {
+      const child = spawn14(cmd.bin, cmd.args, {
         stdio: "ignore",
         detached: true
       });
@@ -1829,10 +1829,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path48) {
-  if (!path48)
+function getElementAtPath(obj, path51) {
+  if (!path51)
     return obj;
-  return path48.reduce((acc, key) => acc?.[key], obj);
+  return path51.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -2160,11 +2160,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path48, issues) {
+function prefixIssues(path51, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path48);
+    iss.path.unshift(path51);
     return iss;
   });
 }
@@ -2382,16 +2382,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path48 = []) => {
+  const processError = (error52, path51 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path48, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path51, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path48, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path51, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path48, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path51, ...issue2.path]);
       } else {
-        const fullpath = [...path48, ...issue2.path];
+        const fullpath = [...path51, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -2418,17 +2418,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path48 = []) => {
+  const processError = (error52, path51 = []) => {
     var _a3, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path48, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path51, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path48, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path51, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path48, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path51, ...issue2.path]);
       } else {
-        const fullpath = [...path48, ...issue2.path];
+        const fullpath = [...path51, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -2460,8 +2460,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path48 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path48) {
+  const path51 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path51) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -15964,13 +15964,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path48 = ref.slice(1).split("/").filter(Boolean);
-  if (path48.length === 0) {
+  const path51 = ref.slice(1).split("/").filter(Boolean);
+  if (path51.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path48[0] === defsKey) {
-    const key = path48[1];
+  if (path51[0] === defsKey) {
+    const key = path51[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -18134,11 +18134,11 @@ var init_tools = __esm({
           if (!ctx.addDocument)
             return "Knowledge vault tool not available.";
           const title = args["title"] || "New Document";
-          const path48 = args["path"] || `notes/${title.toLowerCase().replace(/[^a-z0-9]+/g, "-")}`;
+          const path51 = args["path"] || `notes/${title.toLowerCase().replace(/[^a-z0-9]+/g, "-")}`;
           const content = args["content"] || "";
           const tags = args["tags"] || [];
           ctx.addDocument({
-            path: path48,
+            path: path51,
             title,
             content,
             format: "markdown",
@@ -18147,7 +18147,7 @@ var init_tools = __esm({
             workspaceId: ctx.workspaceId
           });
           ctx.addActivity("vault", "created document", title);
-          return `Document "${title}" created at "${path48}".`;
+          return `Document "${title}" created at "${path51}".`;
         }
       }
     ];
@@ -21166,23 +21166,303 @@ var init_sessionJsonl = __esm({
   }
 });
 
+// packages/core/dist/core/hooks/types.js
+function normalizeToolName(raw) {
+  const n = raw.toLowerCase().replace(/[_-]/g, "");
+  return TOOL_ALIASES[n] ?? n;
+}
+function toolMatches(pattern, toolName) {
+  if (pattern === "*")
+    return true;
+  return normalizeToolName(pattern) === normalizeToolName(toolName);
+}
+function hookMatches(hook, event, toolName) {
+  if (!hook.match.events.includes(event))
+    return false;
+  if (event === "PreToolUse" || event === "PostToolUse") {
+    if (!toolName)
+      return false;
+    return hook.match.tools.some((t) => toolMatches(t, toolName));
+  }
+  return true;
+}
+var TOOL_ALIASES;
+var init_types2 = __esm({
+  "packages/core/dist/core/hooks/types.js"() {
+    "use strict";
+    TOOL_ALIASES = {
+      read: "read_file",
+      readfile: "read_file",
+      cat: "read_file",
+      write: "write_file",
+      writefile: "write_file",
+      edit: "edit_file",
+      editfile: "edit_file",
+      glob: "list_files",
+      listdir: "list_files",
+      listdirectory: "list_files",
+      ls: "list_files",
+      dir: "list_files",
+      find: "list_files",
+      grep: "grep_content",
+      search: "grep_content",
+      searchrag: "searchDocuments",
+      rag: "searchDocuments",
+      shell: "bash",
+      terminal: "bash",
+      cmd: "bash",
+      run: "bash",
+      exec: "bash"
+    };
+  }
+});
+
+// packages/core/dist/core/hooks/lifecycleHookRunner.js
+import { spawn as spawn2 } from "node:child_process";
+import { readdirSync, readFileSync as readFileSync4 } from "node:fs";
+import path12 from "node:path";
+function parseJson(text) {
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+}
+var DEFAULT_TIMEOUT_MS, LifecycleHookRunner;
+var init_lifecycleHookRunner = __esm({
+  "packages/core/dist/core/hooks/lifecycleHookRunner.js"() {
+    "use strict";
+    init_types2();
+    DEFAULT_TIMEOUT_MS = 5e3;
+    LifecycleHookRunner = class {
+      hooks = [];
+      logger;
+      defaultTimeoutMs;
+      constructor(options = {}) {
+        this.logger = options.logger ?? ((msg) => console.error(`[hooks] ${msg}`));
+        this.defaultTimeoutMs = options.defaultTimeoutMs ?? DEFAULT_TIMEOUT_MS;
+        for (const dir of options.dirs ?? []) {
+          this.loadDir(dir);
+        }
+      }
+      /** Add a single hook definition (used by tests / programmatic config). */
+      addHook(hook) {
+        this.hooks.push(hook);
+      }
+      /** Scan a directory for `*.json` hook files and load them. Returns count. */
+      loadDir(dir) {
+        let files;
+        try {
+          files = readdirSync(dir).filter((f) => f.endsWith(".json"));
+        } catch {
+          return 0;
+        }
+        let loaded = 0;
+        for (const f of files) {
+          const full = path12.join(dir, f);
+          try {
+            const parsed = parseJson(readFileSync4(full, "utf8"));
+            if (!parsed || !parsed.name || !parsed.match) {
+              this.logger(`skipping invalid hook file ${full}`);
+              continue;
+            }
+            parsed.name = parsed.name || path12.basename(f, ".json");
+            this.hooks.push(parsed);
+            loaded += 1;
+          } catch (err) {
+            this.logger(`failed to load hook ${full}: ${err instanceof Error ? err.message : String(err)}`);
+          }
+        }
+        return loaded;
+      }
+      listHooks() {
+        return [...this.hooks];
+      }
+      /**
+       * Run matching PreToolUse hooks. Returns `{ ok: false }` ONLY when a hook
+       * explicitly denies. All other outcomes (no match, crash, timeout, invalid
+       * JSON, allow decision) return `{ ok: true }`.
+       */
+      async runPreToolUse(toolName, toolInput, ctx) {
+        for (const hook of this.hooks) {
+          if (!hookMatches(hook, "PreToolUse", toolName))
+            continue;
+          const payload = {
+            event: "PreToolUse",
+            toolName,
+            toolInput,
+            sessionId: ctx.sessionId,
+            cwd: ctx.cwd
+          };
+          const decision = await this.runHookSafely(hook, payload);
+          if (decision.decision === "deny") {
+            return {
+              ok: false,
+              hookName: hook.name,
+              reason: decision.reason || `blocked by hook "${hook.name}"`
+            };
+          }
+        }
+        return { ok: true };
+      }
+      /** Run matching PostToolUse hooks. Fail-open, results are logged only. */
+      async runPostToolUse(toolName, toolInput, toolOutput, ctx) {
+        for (const hook of this.hooks) {
+          if (!hookMatches(hook, "PostToolUse", toolName))
+            continue;
+          const payload = {
+            event: "PostToolUse",
+            toolName,
+            toolInput,
+            toolOutput,
+            ok: ctx.ok ?? true,
+            error: ctx.error,
+            sessionId: ctx.sessionId,
+            cwd: ctx.cwd
+          };
+          await this.runHookSafely(hook, payload);
+        }
+      }
+      /** Run matching SessionStart hooks. Fail-open; deny never throws. */
+      async runSessionStart(ctx) {
+        return this.runSessionHooks("SessionStart", ctx);
+      }
+      /** Run matching SessionEnd hooks. Fail-open. */
+      async runSessionEnd(ctx) {
+        return this.runSessionHooks("SessionEnd", ctx);
+      }
+      async runSessionHooks(event, ctx) {
+        for (const hook of this.hooks) {
+          if (!hookMatches(hook, event, void 0))
+            continue;
+          const payload = {
+            event,
+            sessionId: ctx.sessionId,
+            cwd: ctx.cwd
+          };
+          const decision = await this.runHookSafely(hook, payload);
+          if (decision.decision === "deny") {
+            return {
+              ok: false,
+              hookName: hook.name,
+              reason: decision.reason || `blocked by hook "${hook.name}"`
+            };
+          }
+        }
+        return { ok: true };
+      }
+      /** Execute a single hook, swallowing every failure into an allow. */
+      async runHookSafely(hook, payload) {
+        try {
+          const timeoutMs = hook.timeoutMs ?? this.defaultTimeoutMs;
+          const raw = hook.url ? await this.postHttp(hook.url, payload, timeoutMs) : await this.execCommand(hook.command ?? "", payload, timeoutMs, hook.cwd);
+          const decision = parseJson(raw);
+          if (!decision) {
+            this.logger(`hook "${hook.name}" returned invalid JSON (fail-open): ${raw.slice(0, 200)}`);
+            return { decision: "allow" };
+          }
+          if (decision.decision === "deny" && typeof decision.reason !== "string") {
+            this.logger(`hook "${hook.name}" denied without reason (fail-open)`);
+            return { decision: "allow" };
+          }
+          return decision;
+        } catch (err) {
+          this.logger(`hook "${hook.name}" failed (fail-open): ${err instanceof Error ? err.message : String(err)}`);
+          return { decision: "allow" };
+        }
+      }
+      /** Spawn `command`, write JSON payload to stdin, read stdout until close. */
+      execCommand(command, payload, timeoutMs, cwd) {
+        return new Promise((resolve3, reject) => {
+          const child = spawn2(command, {
+            shell: true,
+            cwd,
+            stdio: ["pipe", "pipe", "pipe"],
+            windowsHide: true
+          });
+          let stdout = "";
+          let stderr = "";
+          const timer = setTimeout(() => {
+            child.kill("SIGKILL");
+            reject(new Error(`timed out after ${timeoutMs}ms`));
+          }, timeoutMs);
+          child.stdout?.on("data", (d) => {
+            stdout += d.toString();
+          });
+          child.stderr?.on("data", (d) => {
+            stderr += d.toString();
+          });
+          child.on("error", (err) => {
+            clearTimeout(timer);
+            reject(err);
+          });
+          child.on("close", (code) => {
+            clearTimeout(timer);
+            if (code !== 0) {
+              reject(new Error(`exited ${code}: ${stderr.trim().slice(0, 200)}`));
+              return;
+            }
+            resolve3(stdout);
+          });
+          child.stdin?.on("error", () => {
+          });
+          child.stdin?.write(JSON.stringify(payload));
+          child.stdin?.end();
+        });
+      }
+      /** POST JSON payload; resolve with the response body text. */
+      async postHttp(url2, payload, timeoutMs) {
+        const ctrl = new AbortController();
+        const timer = setTimeout(() => ctrl.abort(), timeoutMs);
+        try {
+          const res = await fetch(url2, {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify(payload),
+            signal: ctrl.signal
+          });
+          if (!res.ok) {
+            throw new Error(`HTTP ${res.status}`);
+          }
+          return await res.text();
+        } finally {
+          clearTimeout(timer);
+        }
+      }
+    };
+  }
+});
+
+// packages/core/dist/core/hooks/index.js
+var init_hooks = __esm({
+  "packages/core/dist/core/hooks/index.js"() {
+    "use strict";
+    init_types2();
+    init_lifecycleHookRunner();
+  }
+});
+
 // packages/core/dist/harness/index.js
 var harness_exports = {};
 __export(harness_exports, {
   AgentHarness: () => AgentHarness,
   DOOM_LOOP_THRESHOLD: () => DOOM_LOOP_THRESHOLD,
+  LifecycleHookRunner: () => LifecycleHookRunner,
   SessionJsonlWriter: () => SessionJsonlWriter,
   TEXT_LOOP_RECOVERY_SYSTEM: () => TEXT_LOOP_RECOVERY_SYSTEM,
   TEXT_LOOP_RECOVERY_USER_PROMPT: () => TEXT_LOOP_RECOVERY_USER_PROMPT,
   collapseLoopedAssistantText: () => collapseLoopedAssistantText,
   detectAssistantTextLoop: () => detectAssistantTextLoop,
   hashToolCall: () => hashToolCall,
+  hookMatches: () => hookMatches,
   isStatusTheaterUnit: () => isStatusTheaterUnit,
   normalizeLoopUnit: () => normalizeLoopUnit,
   normalizeTextToolArgs: () => normalizeTextToolArgs,
+  normalizeToolName: () => normalizeToolName,
   parseMinimaxStyleToolCalls: () => parseMinimaxStyleToolCalls,
   parseTextToolCalls: () => parseTextToolCalls,
   readSession: () => readSession,
+  toolMatches: () => toolMatches,
   wrapLegacyStream: () => wrapLegacyStream
 });
 var init_harness = __esm({
@@ -21191,6 +21471,7 @@ var init_harness = __esm({
     init_AgentHarness();
     init_providerStream();
     init_sessionJsonl();
+    init_hooks();
   }
 });
 
@@ -21667,7 +21948,7 @@ var init_parseCssMotion = __esm({
 });
 
 // packages/core/dist/council/verification/citeVerify.js
-import { existsSync as existsSync5, readFileSync as readFileSync4 } from "node:fs";
+import { existsSync as existsSync5, readFileSync as readFileSync5 } from "node:fs";
 import { join } from "node:path";
 function extractCitations(text) {
   const out = [];
@@ -21704,7 +21985,7 @@ function verifyCitations(projectRoot, synthesisText) {
       });
       continue;
     }
-    const lines = readFileSync4(abs, "utf8").split(/\r?\n/);
+    const lines = readFileSync5(abs, "utf8").split(/\r?\n/);
     if (cite.line > lines.length) {
       results.push({
         id: "synthesis.cite-invalid",
@@ -21967,14 +22248,14 @@ var init_synthesisAudit = __esm({
 });
 
 // packages/core/dist/council/verification/runChecks.js
-import { existsSync as existsSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "node:fs";
+import { existsSync as existsSync6, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "node:fs";
 import { join as join2 } from "node:path";
 function loadNfrSpec(zelariRoot) {
-  const path48 = join2(zelariRoot, "nfr-spec.json");
-  if (!existsSync6(path48))
+  const path51 = join2(zelariRoot, "nfr-spec.json");
+  if (!existsSync6(path51))
     return null;
   try {
-    const raw = JSON.parse(readFileSync5(path48, "utf8"));
+    const raw = JSON.parse(readFileSync6(path51, "utf8"));
     if (raw.version !== 1 || !Array.isArray(raw.targets))
       return null;
     return raw;
@@ -22049,13 +22330,13 @@ function checkPlanReality(projectRoot, zelariRoot, targets, keywords) {
     return [];
   let plan;
   try {
-    plan = JSON.parse(readFileSync5(planPath, "utf8"));
+    plan = JSON.parse(readFileSync6(planPath, "utf8"));
   } catch {
     return [];
   }
   const milestoneText = (plan.milestones ?? []).map((m) => `${m.name ?? ""} ${m.description ?? ""}`).join(" ").toLowerCase();
   const results = [];
-  const targetContent = targets.map((t) => readFileSync5(join2(projectRoot, t), "utf8").toLowerCase()).join("\n");
+  const targetContent = targets.map((t) => readFileSync6(join2(projectRoot, t), "utf8").toLowerCase()).join("\n");
   for (const kw of keywords) {
     const low = kw.toLowerCase();
     if (!milestoneText.includes(low))
@@ -22087,11 +22368,11 @@ function checkReadmeStale(projectRoot, targets) {
   const readmePath = join2(projectRoot, "README.md");
   if (!existsSync6(readmePath) || targets.length === 0)
     return [];
-  const readme = readFileSync5(readmePath, "utf8");
+  const readme = readFileSync6(readmePath, "utf8");
   const htmlPath = join2(projectRoot, targets[0]);
   if (!existsSync6(htmlPath))
     return [];
-  const html = readFileSync5(htmlPath, "utf8");
+  const html = readFileSync6(htmlPath, "utf8");
   const sectionCount = (html.match(/<section\s+id=/gi) ?? []).length;
   const readmeSections = readme.match(/(\d+)\s+sezioni/i);
   if (readmeSections) {
@@ -22129,7 +22410,7 @@ function runImplementationVerification(input) {
     forbidLayoutProps: anim.forbidLayoutProps ?? true
   };
   for (const rel2 of targets) {
-    const html = readFileSync5(join2(input.projectRoot, rel2), "utf8");
+    const html = readFileSync6(join2(input.projectRoot, rel2), "utf8");
     for (const v of scanKeyframesViolations(html, scanOpts)) {
       results.push({
         id: "motion.keyframes",
@@ -22215,7 +22496,7 @@ var init_runChecks = __esm({
 });
 
 // packages/core/dist/council/verification/microGate.js
-import { existsSync as existsSync7, readFileSync as readFileSync6 } from "node:fs";
+import { existsSync as existsSync7, readFileSync as readFileSync7 } from "node:fs";
 import { join as join3 } from "node:path";
 function checkDeadHooksInHtml(html) {
   const warnings = [];
@@ -22253,7 +22534,7 @@ function runMicroVerificationOnFile(projectRoot, relPath, zelariRoot) {
     compositorOnly: anim.compositorOnly ?? true,
     forbidLayoutProps: anim.forbidLayoutProps ?? true
   };
-  const html = readFileSync6(abs, "utf8");
+  const html = readFileSync7(abs, "utf8");
   const warnings = [];
   for (const v of scanKeyframesViolations(html, scanOpts)) {
     warnings.push({
@@ -22609,7 +22890,7 @@ var init_implementationDelivery = __esm({
 });
 
 // packages/core/dist/council/verification/inlineJsAutofix.js
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync5 } from "node:fs";
+import { readFileSync as readFileSync8, writeFileSync as writeFileSync5 } from "node:fs";
 import { join as join4 } from "node:path";
 function minifyInlineJs(js) {
   let out = js.replace(/\/\*[\s\S]*?\*\//g, "");
@@ -22656,7 +22937,7 @@ function applyInlineJsAutofix(projectRoot, report) {
     const abs = join4(projectRoot, rel2);
     let html;
     try {
-      html = readFileSync7(abs, "utf8");
+      html = readFileSync8(abs, "utf8");
     } catch {
       continue;
     }
@@ -24048,14 +24329,14 @@ var init_missionBrief = __esm({
 });
 
 // packages/core/dist/council/verification/types.js
-var init_types2 = __esm({
+var init_types3 = __esm({
   "packages/core/dist/council/verification/types.js"() {
     "use strict";
   }
 });
 
 // packages/core/dist/council/verification/motionAutofix.js
-import { readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "node:fs";
+import { readFileSync as readFileSync9, writeFileSync as writeFileSync6 } from "node:fs";
 import { join as join6 } from "node:path";
 function sanitizeTransitionPart(part) {
   const tokens = part.trim().split(/\s+/);
@@ -24134,7 +24415,7 @@ function applyMotionAutofix(projectRoot, report) {
     const abs = join6(projectRoot, rel2);
     let html;
     try {
-      html = readFileSync8(abs, "utf8");
+      html = readFileSync9(abs, "utf8");
     } catch {
       continue;
     }
@@ -24206,7 +24487,7 @@ var init_motionAutofix = __esm({
 });
 
 // packages/core/dist/council/verification/autofix.js
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync7 } from "node:fs";
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync7 } from "node:fs";
 import { join as join7 } from "node:path";
 function applyDeterministicAutofix(projectRoot, report) {
   const motion = applyMotionAutofix(projectRoot, report);
@@ -24222,7 +24503,7 @@ function applyDeterministicAutofix(projectRoot, report) {
     if (!m || m[1] === "rm")
       continue;
     const abs = join7(projectRoot, rel2);
-    let html = readFileSync9(abs, "utf8");
+    let html = readFileSync10(abs, "utf8");
     const snippet = m[0];
     if (!html.includes(snippet))
       continue;
@@ -24252,7 +24533,7 @@ var init_autofix = __esm({
 var init_verification = __esm({
   "packages/core/dist/council/verification/index.js"() {
     "use strict";
-    init_types2();
+    init_types3();
     init_runChecks();
     init_honesty();
     init_parseCssMotion();
@@ -24270,19 +24551,19 @@ var init_verification = __esm({
 });
 
 // packages/core/dist/council/lessons/types.js
-var init_types3 = __esm({
+var init_types4 = __esm({
   "packages/core/dist/council/lessons/types.js"() {
     "use strict";
   }
 });
 
 // packages/core/dist/council/lessons/io.js
-import { readFileSync as readFileSync10 } from "node:fs";
+import { readFileSync as readFileSync11 } from "node:fs";
 import { join as join8 } from "node:path";
 function readLessonsDeduped(zelariRoot) {
-  const path48 = join8(zelariRoot, LESSONS_FILE);
+  const path51 = join8(zelariRoot, LESSONS_FILE);
   try {
-    const raw = readFileSync10(path48, "utf8");
+    const raw = readFileSync11(path51, "utf8");
     const byId = /* @__PURE__ */ new Map();
     for (const line of raw.split(/\r?\n/)) {
       if (!line.trim())
@@ -24383,8 +24664,8 @@ function keywordsFrom(check2, signature) {
   return [.../* @__PURE__ */ new Set([...fromId, ...words])].slice(0, 12);
 }
 function writeLesson(zelariRoot, lesson) {
-  const path48 = join9(zelariRoot, LESSONS_FILE);
-  appendFileSync(path48, `${JSON.stringify(lesson)}
+  const path51 = join9(zelariRoot, LESSONS_FILE);
+  appendFileSync(path51, `${JSON.stringify(lesson)}
 `, "utf8");
 }
 function findSimilar(lessons, signature) {
@@ -24523,7 +24804,7 @@ var init_recallLessons = __esm({
 var init_lessons = __esm({
   "packages/core/dist/council/lessons/index.js"() {
     "use strict";
-    init_types3();
+    init_types4();
     init_io();
     init_isAnswerLeak();
     init_signatures();
@@ -24533,7 +24814,7 @@ var init_lessons = __esm({
 });
 
 // packages/core/dist/council/completion/types.js
-var init_types4 = __esm({
+var init_types5 = __esm({
   "packages/core/dist/council/completion/types.js"() {
     "use strict";
   }
@@ -24614,7 +24895,7 @@ var init_buildCompletion = __esm({
 var init_completion2 = __esm({
   "packages/core/dist/council/completion/index.js"() {
     "use strict";
-    init_types4();
+    init_types5();
     init_buildCompletion();
   }
 });
@@ -24933,7 +25214,7 @@ var init_council = __esm({
 });
 
 // packages/core/dist/memory/types.js
-var init_types5 = __esm({
+var init_types6 = __esm({
   "packages/core/dist/memory/types.js"() {
     "use strict";
   }
@@ -24997,9 +25278,9 @@ function findCycle(nodes) {
     if (color.get(start) !== WHITE)
       continue;
     const stack = [[start, 0]];
-    const path48 = [];
+    const path51 = [];
     color.set(start, GRAY);
-    path48.push(start);
+    path51.push(start);
     while (stack.length > 0) {
       const top = stack[stack.length - 1];
       const [id, idx] = top;
@@ -25012,17 +25293,17 @@ function findCycle(nodes) {
           continue;
         const c = color.get(dep);
         if (c === GRAY) {
-          const at = path48.indexOf(dep);
-          return [...path48.slice(at), dep];
+          const at = path51.indexOf(dep);
+          return [...path51.slice(at), dep];
         }
         if (c === WHITE) {
           color.set(dep, GRAY);
-          path48.push(dep);
+          path51.push(dep);
           stack.push([dep, 0]);
         }
       } else {
         color.set(id, BLACK);
-        path48.pop();
+        path51.pop();
         stack.pop();
       }
     }
@@ -25649,7 +25930,7 @@ var init_personas = __esm({
 
 // packages/core/dist/kraken/runtime/types.js
 var PlanError;
-var init_types6 = __esm({
+var init_types7 = __esm({
   "packages/core/dist/kraken/runtime/types.js"() {
     "use strict";
     PlanError = class extends Error {
@@ -25747,7 +26028,7 @@ var MAX_BUNDLE_BYTES, FORBIDDEN_TOKENS;
 var init_sandbox = __esm({
   "packages/core/dist/kraken/runtime/sandbox.js"() {
     "use strict";
-    init_types6();
+    init_types7();
     MAX_BUNDLE_BYTES = 256 * 1024;
     FORBIDDEN_TOKENS = [
       /\bprocess\b/,
@@ -25810,7 +26091,7 @@ var init_runner = __esm({
     "use strict";
     init_verdict();
     init_personas();
-    init_types6();
+    init_types7();
     DEFAULT_MAX_TENTACLES = 200;
     DEFAULT_PLAN_TIMEOUT_MS = 30 * 6e4;
     ScriptRunner = class {
@@ -25942,8 +26223,8 @@ var init_runner = __esm({
           failed: [...this.tentaclesById.values()].filter((r) => r.status === "error"),
           pending: []
         };
-        const path48 = await this.host.saveSnapshot(snapshot, ".zelari/kraken/snapshots");
-        this.host.log(`checkpoint: ${label ?? "auto"} \u2192 ${path48}`);
+        const path51 = await this.host.saveSnapshot(snapshot, ".zelari/kraken/snapshots");
+        this.host.log(`checkpoint: ${label ?? "auto"} \u2192 ${path51}`);
         return snapshot;
       }
       callLog(msg, data) {
@@ -25994,7 +26275,7 @@ var init_runner = __esm({
 var init_runtime = __esm({
   "packages/core/dist/kraken/runtime/index.js"() {
     "use strict";
-    init_types6();
+    init_types7();
     init_sandbox();
     init_runner();
   }
@@ -26047,6 +26328,7 @@ __export(dist_exports, {
   LANGUAGE_POLICY_MODULE_TYPE: () => LANGUAGE_POLICY_MODULE_TYPE,
   LAYOUT_MOTION_PROPS: () => LAYOUT_MOTION_PROPS,
   LESSONS_FILE: () => LESSONS_FILE,
+  LifecycleHookRunner: () => LifecycleHookRunner,
   MAX_DELIVERY_ATTEMPTS: () => MAX_DELIVERY_ATTEMPTS,
   MAX_FINDINGS_CHARS: () => MAX_FINDINGS_CHARS,
   MAX_RETRY_PER_MEMBER: () => MAX_RETRY_PER_MEMBER,
@@ -26155,6 +26437,7 @@ __export(dist_exports, {
   getToolDescriptions: () => getToolDescriptions,
   hasInteractiveClarification: () => hasInteractiveClarification,
   hashToolCall: () => hashToolCall,
+  hookMatches: () => hookMatches,
   isAnswerLeak: () => isAnswerLeak,
   isBrainAgentEndEvent: () => isBrainAgentEndEvent,
   isBrainAgentStartEvent: () => isBrainAgentStartEvent,
@@ -26187,6 +26470,7 @@ __export(dist_exports, {
   normalizeLoopUnit: () => normalizeLoopUnit,
   normalizeScopePath: () => normalizeScopePath,
   normalizeTextToolArgs: () => normalizeTextToolArgs,
+  normalizeToolName: () => normalizeToolName,
   parseClarificationRequest: () => parseClarificationRequest,
   parseEvidenceTier: () => parseEvidenceTier,
   parseMinimaxStyleToolCalls: () => parseMinimaxStyleToolCalls,
@@ -26241,6 +26525,7 @@ __export(dist_exports, {
   taskMatchesNfrKeywords: () => taskMatchesNfrKeywords,
   tierAtLeast: () => tierAtLeast,
   tokenizeForSignature: () => tokenizeForSignature,
+  toolMatches: () => toolMatches,
   topoLevels: () => topoLevels,
   unregisterCustomTool: () => unregisterCustomTool,
   unregisterSkill: () => unregisterSkill,
@@ -26263,7 +26548,7 @@ var init_dist = __esm({
     init_harness();
     init_council();
     init_skills2();
-    init_types5();
+    init_types6();
     init_state();
     init_kraken();
   }
@@ -26961,9 +27246,9 @@ function spillToolOutput(fullText, meta3) {
     const rnd = randomBytes(3).toString("hex");
     const safeTool = (meta3?.toolName ?? "tool").replace(/[^a-zA-Z0-9._-]+/g, "_").slice(0, 32);
     const file2 = `${stamp}-${safeTool}-${hash3}-${rnd}.txt`;
-    const path48 = join11(dir, file2);
-    writeFileSync10(path48, fullText, "utf8");
-    return path48;
+    const path51 = join11(dir, file2);
+    writeFileSync10(path51, fullText, "utf8");
+    return path51;
   } catch {
     return null;
   }
@@ -27009,10 +27294,10 @@ function truncateToolResult(text, capOrOpts = TOOL_RESULT_LINE_CAP) {
 ${tail}`;
   }
   if (doSpill) {
-    const path48 = spillToolOutput(text, { toolName: opts.toolName });
-    if (path48) {
+    const path51 = spillToolOutput(text, { toolName: opts.toolName });
+    if (path51) {
       const spillNote = `
-\u2026 [full output spilled to: ${path48} \u2014 re-read with read_file if you need the complete text] \u2026`;
+\u2026 [full output spilled to: ${path51} \u2014 re-read with read_file if you need the complete text] \u2026`;
       if (preview.includes("] \u2026\n")) {
         preview = preview.replace("] \u2026\n", `] \u2026${spillNote}
 `);
@@ -27062,12 +27347,21 @@ var init_registry2 = __esm({
     })();
     ToolRegistry = class {
       tools = /* @__PURE__ */ new Map();
+      /** v0.10.0: lifecycle hooks (PreToolUse/PostToolUse). Null = no hooks. */
+      lifecycleHooks = null;
       register(def) {
         this.tools.set(def.name, def);
       }
       get(name) {
         return this.tools.get(name);
       }
+      /** v0.10.0: attach the fail-open lifecycle hook runner (null to disable). */
+      setLifecycleHooks(runner) {
+        this.lifecycleHooks = runner;
+      }
+      getLifecycleHooks() {
+        return this.lifecycleHooks;
+      }
       list() {
         return Array.from(this.tools.keys());
       }
@@ -27100,6 +27394,18 @@ var init_registry2 = __esm({
           },
           sessionId: options.sessionId ?? "default"
         };
+        if (this.lifecycleHooks) {
+          try {
+            const pre = await this.lifecycleHooks.runPreToolUse(name, parsed.data, {
+              sessionId: ctx.sessionId,
+              cwd: ctx.cwd
+            });
+            if (!pre.ok) {
+              return typedErr(`[hook:${pre.hookName ?? "unknown"}] ${pre.reason ?? "denied"}`);
+            }
+          } catch (hookErr) {
+          }
+        }
         try {
           const result = await Promise.race([
             tool.execute(parsed.data, ctx),
@@ -27128,6 +27434,17 @@ var init_registry2 = __esm({
               }
             }
           }
+          if (this.lifecycleHooks) {
+            try {
+              await this.lifecycleHooks.runPostToolUse(name, parsed.data, result, {
+                sessionId: ctx.sessionId,
+                cwd: ctx.cwd,
+                ok: result.ok,
+                error: result.ok ? void 0 : "error" in result ? result.error : void 0
+              });
+            } catch {
+            }
+          }
           return result;
         } catch (err) {
           const error51 = err instanceof Error ? err.message : String(err);
@@ -27150,14 +27467,14 @@ var init_registry2 = __esm({
 });
 
 // src/cli/safety/sandboxPath.ts
-import path14 from "node:path";
+import path15 from "node:path";
 function resolveSandboxedPath(userPath, options = {}) {
   if (typeof userPath !== "string" || userPath.length === 0) {
     throw new SandboxViolationError("Empty path", userPath, "");
   }
-  const root = path14.resolve(options.root ?? process.cwd());
-  const resolved = path14.isAbsolute(userPath) ? path14.resolve(userPath) : path14.resolve(root, userPath);
-  const rootWithSep = root.endsWith(path14.sep) ? root : root + path14.sep;
+  const root = path15.resolve(options.root ?? process.cwd());
+  const resolved = path15.isAbsolute(userPath) ? path15.resolve(userPath) : path15.resolve(root, userPath);
+  const rootWithSep = root.endsWith(path15.sep) ? root : root + path15.sep;
   if (resolved !== root && !resolved.startsWith(rootWithSep)) {
     throw new SandboxViolationError(
       `Path escapes sandbox root: ${userPath} \u2192 ${resolved} (root: ${root})`,
@@ -27245,12 +27562,12 @@ __export(auditLogger_exports, {
   AuditLogger: () => AuditLogger
 });
 import { promises as fs11 } from "node:fs";
-import path15 from "node:path";
+import path16 from "node:path";
 import os6 from "node:os";
 function defaultAuditPath() {
   const override = process.env.ANATHEMA_AUDIT_LOG;
   if (override && override.trim().length > 0) return override;
-  return path15.join(os6.tmpdir(), "zelari-code", "audit.jsonl");
+  return path16.join(os6.tmpdir(), "zelari-code", "audit.jsonl");
 }
 function redactArgs(args) {
   const redacted = {};
@@ -27293,7 +27610,7 @@ var init_auditLogger = __esm({
       async append(entry) {
         const line = JSON.stringify(entry) + "\n";
         this.writeQueue = this.writeQueue.then(async () => {
-          await fs11.mkdir(path15.dirname(this.logPath), { recursive: true });
+          await fs11.mkdir(path16.dirname(this.logPath), { recursive: true });
           await fs11.appendFile(this.logPath, line, "utf-8");
         });
         return this.writeQueue;
@@ -27353,9 +27670,9 @@ var init_cmdline = __esm({
 });
 
 // src/cli/diagnostics/engine.ts
-import { spawn as spawn2 } from "node:child_process";
+import { spawn as spawn3 } from "node:child_process";
 import { existsSync as existsSync12 } from "node:fs";
-import path16 from "node:path";
+import path17 from "node:path";
 function parseEslintJson(stdout, _file2) {
   const json2 = safeJson(stdout);
   if (!Array.isArray(json2)) return [];
@@ -27414,7 +27731,7 @@ function safeJson(s) {
   }
 }
 function providerForFile(file2, providers = DEFAULT_PROVIDERS) {
-  const ext = path16.extname(file2).toLowerCase();
+  const ext = path17.extname(file2).toLowerCase();
   return providers.find((p3) => p3.extensions.includes(ext)) ?? null;
 }
 function resolveBin(bin, cwd) {
@@ -27422,10 +27739,10 @@ function resolveBin(bin, cwd) {
   let dir = cwd;
   for (let i = 0; i < 6; i += 1) {
     for (const suffix of suffixes) {
-      const candidate = path16.join(dir, "node_modules", ".bin", `${bin}${suffix}`);
+      const candidate = path17.join(dir, "node_modules", ".bin", `${bin}${suffix}`);
       if (existsSync12(candidate)) return candidate;
     }
-    const parent = path16.dirname(dir);
+    const parent = path17.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -27498,7 +27815,7 @@ var init_engine = __esm({
       };
       let child;
       try {
-        child = process.platform === "win32" ? spawn2(buildCmdLine(cmd, args), { cwd: opts.cwd, shell: true }) : spawn2(cmd, args, { cwd: opts.cwd });
+        child = process.platform === "win32" ? spawn3(buildCmdLine(cmd, args), { cwd: opts.cwd, shell: true }) : spawn3(cmd, args, { cwd: opts.cwd });
       } catch {
         done({ code: null, stdout: "", stderr: "" });
         return;
@@ -27529,14 +27846,14 @@ var init_engine = __esm({
 });
 
 // src/cli/tools/krakenRadio.ts
-import { appendFileSync as appendFileSync3, existsSync as existsSync13, mkdirSync as mkdirSync7, readFileSync as readFileSync12, readdirSync } from "node:fs";
-import path17 from "node:path";
+import { appendFileSync as appendFileSync3, existsSync as existsSync13, mkdirSync as mkdirSync7, readFileSync as readFileSync13, readdirSync as readdirSync2 } from "node:fs";
+import path18 from "node:path";
 function radioDir(cwd) {
-  return path17.join(cwd, ".zelari", "radio");
+  return path18.join(cwd, ".zelari", "radio");
 }
 function radioPath(cwd, sessionId) {
   const safe = (sessionId || "default").replace(/[^a-zA-Z0-9._-]/g, "_").slice(0, 80);
-  return path17.join(radioDir(cwd), `${safe}.jsonl`);
+  return path18.join(radioDir(cwd), `${safe}.jsonl`);
 }
 function appendKrakenRadio(cwd, sessionId, event) {
   try {
@@ -27563,7 +27880,7 @@ function readKrakenRadio(cwd, sessionId, limit = 50) {
   try {
     const file2 = radioPath(cwd, sessionId);
     if (!existsSync13(file2)) return [];
-    const lines = readFileSync12(file2, "utf8").split(/\r?\n/).filter(Boolean);
+    const lines = readFileSync13(file2, "utf8").split(/\r?\n/).filter(Boolean);
     const slice = lines.slice(-Math.max(1, limit));
     const out = [];
     for (const line of slice) {
@@ -27586,7 +27903,7 @@ function formatKrakenRadioStatus(cwd, sessionId, limit = 12) {
     const flag = e.ok === false ? "\u2717" : e.ok === true ? "\u2713" : "\xB7";
     const ms = e.durationMs != null ? ` ${e.durationMs}ms` : "";
     const model = e.model ? ` [${e.model}]` : "";
-    const wt = e.worktree ? ` wt=${path17.basename(e.worktree)}` : "";
+    const wt = e.worktree ? ` wt=${path18.basename(e.worktree)}` : "";
     const detail = e.detail ? ` \u2014 ${e.detail.slice(0, 120)}` : "";
     return `${flag} ${e.ts.slice(11, 19)} ${e.kind} ${e.agent} "${e.description}"${model}${wt}${ms}${detail}`;
   });
@@ -27601,7 +27918,7 @@ var init_krakenRadio = __esm({
 // src/cli/tools/krakenWorktree.ts
 import { execFile as execFile2 } from "node:child_process";
 import { existsSync as existsSync14, mkdirSync as mkdirSync8, rmSync } from "node:fs";
-import path18 from "node:path";
+import path19 from "node:path";
 import { promisify } from "node:util";
 import { randomBytes as randomBytes2 } from "node:crypto";
 function isKrakenWorktreeEnabled(env = process.env) {
@@ -27649,8 +27966,8 @@ async function createKrakenWorktree(cwd, label) {
   const id = `${Date.now().toString(36)}-${randomBytes2(3).toString("hex")}`;
   const slug = (label ?? "task").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 24) || "task";
   const branch = `kraken/${slug}-${id}`;
-  const wtRoot = path18.join(repoRoot, ".zelari", "worktrees");
-  const wtPath = path18.join(wtRoot, `kraken-${id}`);
+  const wtRoot = path19.join(repoRoot, ".zelari", "worktrees");
+  const wtPath = path19.join(wtRoot, `kraken-${id}`);
   try {
     if (!existsSync14(wtRoot)) mkdirSync8(wtRoot, { recursive: true });
   } catch {
@@ -28243,7 +28560,7 @@ var init_askUser = __esm({
 });
 
 // src/cli/skillsMd.ts
-import { existsSync as existsSync15, readdirSync as readdirSync2, readFileSync as readFileSync13 } from "node:fs";
+import { existsSync as existsSync15, readdirSync as readdirSync3, readFileSync as readFileSync14 } from "node:fs";
 import { join as join12 } from "node:path";
 import { homedir as homedir4 } from "node:os";
 function skillMdSearchDirs(projectRoot = process.cwd()) {
@@ -28312,7 +28629,7 @@ function loadSkillMdSkills(projectRoot = process.cwd(), options = {}) {
     if (!existsSync15(dir)) continue;
     let entries;
     try {
-      entries = readdirSync2(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
+      entries = readdirSync3(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
     } catch {
       continue;
     }
@@ -28320,7 +28637,7 @@ function loadSkillMdSkills(projectRoot = process.cwd(), options = {}) {
       const skillPath = join12(dir, entry, "SKILL.md");
       if (!existsSync15(skillPath)) continue;
       try {
-        const parsed = parseSkillMd(readFileSync13(skillPath, "utf8"), skillPath);
+        const parsed = parseSkillMd(readFileSync14(skillPath, "utf8"), skillPath);
         if (!parsed) {
           summary.skipped.push({ path: skillPath, reason: "missing/invalid frontmatter (name, description) or empty body" });
           continue;
@@ -28725,9 +29042,9 @@ var init_client = __esm({
 });
 
 // src/cli/lsp/servers.ts
-import path19 from "node:path";
+import path20 from "node:path";
 function languageIdForFile(file2) {
-  const ext = path19.extname(file2).toLowerCase();
+  const ext = path20.extname(file2).toLowerCase();
   const map2 = {
     ".ts": "typescript",
     ".tsx": "typescriptreact",
@@ -28742,7 +29059,7 @@ function languageIdForFile(file2) {
   return map2[ext] ?? "plaintext";
 }
 function serverForFile(file2, servers = LSP_SERVERS) {
-  const ext = path19.extname(file2).toLowerCase();
+  const ext = path20.extname(file2).toLowerCase();
   return servers.find((s) => s.extensions.includes(ext)) ?? null;
 }
 function resolveServerCommand(file2, cwd, servers = LSP_SERVERS) {
@@ -28791,8 +29108,8 @@ var init_servers = __esm({
 });
 
 // src/cli/lsp/manager.ts
-import { spawn as spawn3 } from "node:child_process";
-import { readFileSync as readFileSync14 } from "node:fs";
+import { spawn as spawn4 } from "node:child_process";
+import { readFileSync as readFileSync15 } from "node:fs";
 function processTransport(child) {
   return {
     send: (data) => {
@@ -28927,7 +29244,7 @@ var init_manager = __esm({
       // languages already flagged as unavailable
       constructor(options = {}) {
         this.cwd = options.cwd ?? process.cwd();
-        this.spawnImpl = options.spawnImpl ?? spawn3;
+        this.spawnImpl = options.spawnImpl ?? spawn4;
         this.timeoutMs = options.timeoutMs ?? 15e3;
         this.onWarn = options.onWarn ?? ((m) => console.error(m));
       }
@@ -28995,7 +29312,7 @@ var init_manager = __esm({
         const uri = pathToUri(file2);
         let text;
         try {
-          text = readFileSync14(file2, "utf8");
+          text = readFileSync15(file2, "utf8");
         } catch {
           text = "";
         }
@@ -29110,9 +29427,9 @@ var init_manager = __esm({
 
 // src/cli/ast/engine.ts
 import { readFile } from "node:fs/promises";
-import path20 from "node:path";
+import path21 from "node:path";
 function isAstSupported(file2) {
-  return TS_EXTENSIONS.has(path20.extname(file2).toLowerCase());
+  return TS_EXTENSIONS.has(path21.extname(file2).toLowerCase());
 }
 function loadTs() {
   if (!tsPromise) {
@@ -29132,7 +29449,7 @@ async function parseFileSymbols(file2) {
   }
   let source;
   try {
-    source = ts.createSourceFile(path20.basename(file2), text, ts.ScriptTarget.Latest, true);
+    source = ts.createSourceFile(path21.basename(file2), text, ts.ScriptTarget.Latest, true);
   } catch {
     return [];
   }
@@ -29317,13 +29634,13 @@ var init_store = __esm({
 });
 
 // src/cli/semantic/index.ts
-import { promises as fs12, existsSync as existsSync16, readFileSync as readFileSync15 } from "node:fs";
+import { promises as fs12, existsSync as existsSync16, readFileSync as readFileSync16 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import path21 from "node:path";
+import path22 from "node:path";
 import { createHash as createHash2 } from "node:crypto";
 function getIndexPath(root) {
-  const hash3 = createHash2("sha1").update(path21.resolve(root)).digest("hex").slice(0, 16);
-  return process.env.ZELARI_SEMANTIC_FILE ?? path21.join(homedir5(), ".tmp", "zelari-code", "semantic", `${hash3}.json`);
+  const hash3 = createHash2("sha1").update(path22.resolve(root)).digest("hex").slice(0, 16);
+  return process.env.ZELARI_SEMANTIC_FILE ?? path22.join(homedir5(), ".tmp", "zelari-code", "semantic", `${hash3}.json`);
 }
 async function collectSourceFiles(root, maxFiles = 1500) {
   const out = [];
@@ -29341,11 +29658,11 @@ async function collectSourceFiles(root, maxFiles = 1500) {
         if (entry.isDirectory() && IGNORE_DIRS.has(entry.name)) continue;
         if (entry.isDirectory()) continue;
       }
-      const full = path21.join(dir, entry.name);
+      const full = path22.join(dir, entry.name);
       if (entry.isDirectory()) {
         if (IGNORE_DIRS.has(entry.name)) continue;
         await walk2(full);
-      } else if (SOURCE_EXTENSIONS.has(path21.extname(entry.name).toLowerCase())) {
+      } else if (SOURCE_EXTENSIONS.has(path22.extname(entry.name).toLowerCase())) {
         out.push(full);
       }
     }
@@ -29394,7 +29711,7 @@ async function buildIndex(files, embed, options) {
 }
 async function saveIndex(root, data) {
   const file2 = getIndexPath(root);
-  await fs12.mkdir(path21.dirname(file2), { recursive: true });
+  await fs12.mkdir(path22.dirname(file2), { recursive: true });
   const tmp = `${file2}.tmp-${process.pid}`;
   await fs12.writeFile(tmp, JSON.stringify(data), "utf8");
   await fs12.rename(tmp, file2);
@@ -29403,7 +29720,7 @@ function loadIndex(root) {
   const file2 = getIndexPath(root);
   if (!existsSync16(file2)) return null;
   try {
-    const parsed = JSON.parse(readFileSync15(file2, "utf8"));
+    const parsed = JSON.parse(readFileSync16(file2, "utf8"));
     if (parsed && Array.isArray(parsed.chunks)) return parsed;
   } catch {
   }
@@ -29546,7 +29863,7 @@ var init_provider = __esm({
 });
 
 // src/cli/semantic/tools.ts
-import path22 from "node:path";
+import path23 from "node:path";
 function createSemanticTool(deps) {
   const buildEmbedFn = deps.buildEmbedFn ?? buildProviderEmbedFn;
   return {
@@ -29573,7 +29890,7 @@ function createSemanticTool(deps) {
       return typedOk({
         count: res.hits.length,
         results: res.hits.map((h) => ({
-          location: `${path22.relative(deps.root, h.file) || h.file}:${h.startLine}-${h.endLine}`,
+          location: `${path23.relative(deps.root, h.file) || h.file}:${h.startLine}-${h.endLine}`,
           score: Number(h.score.toFixed(3)),
           preview: h.text.length > 400 ? `${h.text.slice(0, 400)}\u2026` : h.text
         }))
@@ -29593,7 +29910,7 @@ var init_tools4 = __esm({
 
 // src/cli/browser/driver.ts
 import { createRequire } from "node:module";
-import path23 from "node:path";
+import path24 from "node:path";
 import { pathToFileURL } from "node:url";
 function asPlaywright(mod) {
   if (!mod || typeof mod !== "object") return null;
@@ -29604,10 +29921,10 @@ function asPlaywright(mod) {
   return null;
 }
 async function loadPlaywright(cwd) {
-  const base = cwd && cwd.length > 0 ? path23.resolve(cwd) : void 0;
+  const base = cwd && cwd.length > 0 ? path24.resolve(cwd) : void 0;
   if (base) {
     try {
-      const req = createRequire(path23.join(base, "package.json"));
+      const req = createRequire(path24.join(base, "package.json"));
       const resolved = req.resolve("playwright");
       const mod = await import(pathToFileURL(resolved).href);
       const pw = asPlaywright(mod);
@@ -29822,7 +30139,7 @@ var init_driver = __esm({
 });
 
 // src/cli/browser/tools.ts
-import path24 from "node:path";
+import path25 from "node:path";
 import os7 from "node:os";
 function createBrowserTool(deps = {}) {
   return {
@@ -29841,7 +30158,7 @@ function createBrowserTool(deps = {}) {
     execute: async (args, ctx) => {
       const a = args;
       const dir = deps.screenshotDir ?? os7.tmpdir();
-      const screenshotPath = a.screenshot === false ? void 0 : path24.join(dir, `zelari-browser-${Date.now()}.png`);
+      const screenshotPath = a.screenshot === false ? void 0 : path25.join(dir, `zelari-browser-${Date.now()}.png`);
       const result = await runBrowserCheck(
         {
           url: a.url,
@@ -29935,12 +30252,12 @@ import {
   chmodSync,
   existsSync as existsSync17,
   mkdirSync as mkdirSync9,
-  readFileSync as readFileSync16,
+  readFileSync as readFileSync17,
   writeFileSync as writeFileSync11
 } from "node:fs";
 import { dirname as dirname2, join as join13 } from "node:path";
 import { homedir as homedir6 } from "node:os";
-import { spawn as spawn4 } from "node:child_process";
+import { spawn as spawn5 } from "node:child_process";
 function getSshTargetsPath() {
   return join13(homedir6(), ".zelari-code", "ssh-targets.json");
 }
@@ -29953,21 +30270,21 @@ function normalizeAuth(auth) {
   return "agent";
 }
 function readSecrets() {
-  const path48 = getSshSecretsPath();
-  if (!existsSync17(path48)) return {};
+  const path51 = getSshSecretsPath();
+  if (!existsSync17(path51)) return {};
   try {
-    return JSON.parse(readFileSync16(path48, "utf8"));
+    return JSON.parse(readFileSync17(path51, "utf8"));
   } catch {
     return {};
   }
 }
 function writeSecrets(data) {
-  const path48 = getSshSecretsPath();
-  mkdirSync9(dirname2(path48), { recursive: true });
-  writeFileSync11(path48, `${JSON.stringify(data, null, 2)}
+  const path51 = getSshSecretsPath();
+  mkdirSync9(dirname2(path51), { recursive: true });
+  writeFileSync11(path51, `${JSON.stringify(data, null, 2)}
 `, "utf8");
   try {
-    chmodSync(path48, 384);
+    chmodSync(path51, 384);
   } catch {
   }
 }
@@ -29996,10 +30313,10 @@ function deleteSshPassword(id) {
   writeSecrets({ passwords });
 }
 function readStore2() {
-  const path48 = getSshTargetsPath();
-  if (!existsSync17(path48)) return [];
+  const path51 = getSshTargetsPath();
+  if (!existsSync17(path51)) return [];
   try {
-    const parsed = JSON.parse(readFileSync16(path48, "utf8"));
+    const parsed = JSON.parse(readFileSync17(path51, "utf8"));
     const list = Array.isArray(parsed.targets) ? parsed.targets : [];
     return list.filter(
       (t) => t && typeof t.id === "string" && typeof t.host === "string" && typeof t.user === "string"
@@ -30014,11 +30331,11 @@ function readStore2() {
   }
 }
 function writeStore2(targets) {
-  const path48 = getSshTargetsPath();
-  mkdirSync9(dirname2(path48), { recursive: true });
+  const path51 = getSshTargetsPath();
+  mkdirSync9(dirname2(path51), { recursive: true });
   const clean = targets.map(({ hasPassword: _hp, ...t }) => t);
   writeFileSync11(
-    path48,
+    path51,
     `${JSON.stringify({ targets: clean }, null, 2)}
 `,
     "utf8"
@@ -30170,7 +30487,7 @@ function runSsh(target, remoteCommand, timeoutMs = 6e4) {
       if (!env.DISPLAY) env.DISPLAY = "1";
       env.ZELARI_SSH_ASKPASS_PASS = pass;
     }
-    const child = spawn4("ssh", args, {
+    const child = spawn5("ssh", args, {
       windowsHide: true,
       env,
       stdio: ["ignore", "pipe", "pipe"]
@@ -30213,7 +30530,7 @@ function readSshPublicKey(keyOrPubPath) {
   for (const p3 of candidates) {
     if (!existsSync17(p3)) continue;
     try {
-      const content = readFileSync16(p3, "utf8").trim();
+      const content = readFileSync17(p3, "utf8").trim();
       if (!content) continue;
       if (/BEGIN .*PRIVATE KEY/i.test(content)) {
         return {
@@ -30264,11 +30581,11 @@ function formatSshTargetsForPrompt() {
   ];
   for (const t of targets) {
     const tags = t.tags?.length ? ` tags=[${t.tags.join(",")}]` : "";
-    const path48 = t.defaultRemotePath ? ` remotePath=${t.defaultRemotePath}` : "";
+    const path51 = t.defaultRemotePath ? ` remotePath=${t.defaultRemotePath}` : "";
     const allow = t.allowedCommands?.length ? ` allowed=${t.allowedCommands.join("|")}` : " allowed=status-only";
     const auth = t.auth === "password" ? " auth=password" : t.auth === "keyPath" ? " auth=key" : " auth=agent";
     lines.push(
-      `- id=${t.id} name=${t.name} ${t.user}@${t.host}:${t.port ?? 22}${auth}${path48}${tags}${allow}`
+      `- id=${t.id} name=${t.name} ${t.user}@${t.host}:${t.port ?? 22}${auth}${path51}${tags}${allow}`
     );
   }
   return lines.join("\n");
@@ -30395,10 +30712,10 @@ var init_tools6 = __esm({
 
 // src/cli/workspace/worldModel.ts
 import { promises as fs13 } from "node:fs";
-import path25 from "node:path";
-import { spawn as spawn5 } from "node:child_process";
+import path26 from "node:path";
+import { spawn as spawn6 } from "node:child_process";
 function worldDir(cwd) {
-  return path25.join(cwd, WORLD_DIR_NAME);
+  return path26.join(cwd, WORLD_DIR_NAME);
 }
 async function ensureWorldDir(cwd) {
   const dir = worldDir(cwd);
@@ -30408,10 +30725,10 @@ async function ensureWorldDir(cwd) {
 async function appendTimeline(cwd, entry) {
   const dir = await ensureWorldDir(cwd);
   const line = JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), ...entry }) + "\n";
-  await fs13.appendFile(path25.join(dir, TIMELINE_FILE), line, "utf8");
+  await fs13.appendFile(path26.join(dir, TIMELINE_FILE), line, "utf8");
 }
 async function readChecks(cwd) {
-  const p3 = path25.join(worldDir(cwd), CHECKS_FILE);
+  const p3 = path26.join(worldDir(cwd), CHECKS_FILE);
   try {
     const raw = await fs13.readFile(p3, "utf8");
     const parsed = JSON.parse(raw);
@@ -30423,7 +30740,7 @@ async function readChecks(cwd) {
 function runShell(command, cwd, timeoutMs, signal) {
   return new Promise((resolve3) => {
     const isWin = process.platform === "win32";
-    const child = spawn5(isWin ? "cmd.exe" : "/bin/sh", isWin ? ["/c", command] : ["-c", command], {
+    const child = spawn6(isWin ? "cmd.exe" : "/bin/sh", isWin ? ["/c", command] : ["-c", command], {
       cwd,
       env: process.env,
       windowsHide: true,
@@ -30486,8 +30803,8 @@ function runShell(command, cwd, timeoutMs, signal) {
   });
 }
 async function runBacktest(cwd, signal) {
-  const checksPath = path25.join(worldDir(cwd), CHECKS_FILE);
-  const hypothesisPath = path25.join(worldDir(cwd), HYPOTHESIS_FILE);
+  const checksPath = path26.join(worldDir(cwd), CHECKS_FILE);
+  const hypothesisPath = path26.join(worldDir(cwd), HYPOTHESIS_FILE);
   const checks = await readChecks(cwd);
   if (checks.length === 0) {
     return {
@@ -30556,7 +30873,7 @@ var init_worldModel = __esm({
     "use strict";
     init_zod();
     init_toolTypes();
-    WORLD_DIR_NAME = path25.join(".zelari", "world");
+    WORLD_DIR_NAME = path26.join(".zelari", "world");
     HYPOTHESIS_FILE = "hypothesis.md";
     CHECKS_FILE = "checks.json";
     TIMELINE_FILE = "timeline.jsonl";
@@ -30573,7 +30890,7 @@ var init_worldModel = __esm({
       execute: async (args, ctx) => {
         try {
           const dir = await ensureWorldDir(ctx.cwd);
-          const file2 = path25.join(dir, HYPOTHESIS_FILE);
+          const file2 = path26.join(dir, HYPOTHESIS_FILE);
           if (args.append) {
             const block = `
 
@@ -30612,7 +30929,7 @@ ${args.content}
       execute: async (args, ctx) => {
         try {
           const dir = await ensureWorldDir(ctx.cwd);
-          const file2 = path25.join(dir, CHECKS_FILE);
+          const file2 = path26.join(dir, CHECKS_FILE);
           const body = { checks: args.checks };
           await fs13.writeFile(file2, JSON.stringify(body, null, 2) + "\n", "utf8");
           await appendTimeline(ctx.cwd, { kind: "checks_set", count: args.checks.length });
@@ -30651,8 +30968,8 @@ ${args.content}
                 stdoutPreview: "(dryRun)",
                 mismatch: "dryRun"
               })),
-              hypothesisPath: path25.join(worldDir(ctx.cwd), HYPOTHESIS_FILE),
-              checksPath: path25.join(worldDir(ctx.cwd), CHECKS_FILE)
+              hypothesisPath: path26.join(worldDir(ctx.cwd), HYPOTHESIS_FILE),
+              checksPath: path26.join(worldDir(ctx.cwd), CHECKS_FILE)
             });
           }
           const result = await runBacktest(ctx.cwd, ctx.signal);
@@ -30676,7 +30993,7 @@ ${args.content}
       execute: async (args, ctx) => {
         try {
           const dir = await ensureWorldDir(ctx.cwd);
-          const file2 = path25.join(dir, TIMELINE_FILE);
+          const file2 = path26.join(dir, TIMELINE_FILE);
           await appendTimeline(ctx.cwd, {
             kind: args.kind,
             summary: args.summary,
@@ -30772,6 +31089,138 @@ var init_toolPermissions = __esm({
   }
 });
 
+// src/cli/safety/folderTrust.ts
+var folderTrust_exports = {};
+__export(folderTrust_exports, {
+  _setTrustStorePathForTests: () => _setTrustStorePathForTests,
+  getTrustStorePath: () => getTrustStorePath,
+  hasTrustStore: () => hasTrustStore,
+  isFolderTrusted: () => isFolderTrusted,
+  listTrustedFolders: () => listTrustedFolders,
+  trustFolder: () => trustFolder,
+  untrustFolder: () => untrustFolder
+});
+import { homedir as homedir7 } from "node:os";
+import { existsSync as existsSync18, mkdirSync as mkdirSync10, readFileSync as readFileSync18, writeFileSync as writeFileSync12 } from "node:fs";
+import path27 from "node:path";
+function trustStorePath() {
+  return _overrideStorePath ?? path27.join(homedir7(), ".zelari-code", "trust.json");
+}
+function normalize(p3) {
+  const resolved = path27.resolve(p3);
+  return process.platform === "win32" ? resolved.toLowerCase() : resolved;
+}
+function readStore3() {
+  try {
+    const raw = readFileSync18(trustStorePath(), "utf8");
+    const parsed = JSON.parse(raw);
+    if (parsed && Array.isArray(parsed.folders)) return parsed;
+    return DEFAULT_STORE;
+  } catch {
+    return DEFAULT_STORE;
+  }
+}
+function writeStore3(store2) {
+  const p3 = trustStorePath();
+  try {
+    mkdirSync10(path27.dirname(p3), { recursive: true });
+    writeFileSync12(p3, JSON.stringify(store2, null, 2), "utf8");
+  } catch (err) {
+    throw new Error(
+      `failed to persist trust store ${p3}: ${err instanceof Error ? err.message : String(err)}`
+    );
+  }
+}
+function envTrustedFolder() {
+  const raw = process.env.ZELARI_FOLDER_TRUST?.trim();
+  if (!raw) return null;
+  const v = raw.toLowerCase();
+  if (v === "1" || v === "true" || v === "yes" || v === "all") return "all";
+  if (v === "0" || v === "false" || v === "no" || v === "none") return "none";
+  return raw;
+}
+function isFolderTrusted(folderPath) {
+  const env = envTrustedFolder();
+  if (env === "all") return true;
+  if (env === "none") return false;
+  if (env) return normalize(env) === normalize(folderPath);
+  const target = normalize(folderPath);
+  return readStore3().folders.some((f) => normalize(f.path) === target);
+}
+function trustFolder(folderPath) {
+  const store2 = readStore3();
+  const normalized = path27.resolve(folderPath);
+  if (!store2.folders.some((f) => normalize(f.path) === normalize(normalized))) {
+    store2.folders.push({ path: normalized, trustedAt: (/* @__PURE__ */ new Date()).toISOString() });
+    writeStore3(store2);
+  }
+  return { ok: true, path: normalized };
+}
+function untrustFolder(folderPath) {
+  const store2 = readStore3();
+  const target = normalize(folderPath);
+  const before = store2.folders.length;
+  store2.folders = store2.folders.filter((f) => normalize(f.path) !== target);
+  if (store2.folders.length === before) return { ok: true, removed: false };
+  writeStore3(store2);
+  return { ok: true, removed: true };
+}
+function listTrustedFolders() {
+  const env = envTrustedFolder();
+  if (env === "all") {
+    return [{ path: "<all>", trustedAt: "env" }];
+  }
+  if (env) {
+    return [{ path: env, trustedAt: "env" }];
+  }
+  return readStore3().folders;
+}
+function getTrustStorePath() {
+  return trustStorePath();
+}
+function hasTrustStore() {
+  return existsSync18(trustStorePath());
+}
+function _setTrustStorePathForTests(p3) {
+  _overrideStorePath = p3;
+}
+var DEFAULT_STORE, _overrideStorePath;
+var init_folderTrust = __esm({
+  "src/cli/safety/folderTrust.ts"() {
+    "use strict";
+    DEFAULT_STORE = { folders: [] };
+    _overrideStorePath = null;
+  }
+});
+
+// src/cli/safety/lifecycleHooks.ts
+import { homedir as homedir8 } from "node:os";
+import { join as join14 } from "node:path";
+function globalHooksDir() {
+  return join14(homedir8(), ".zelari-code", "hooks");
+}
+function projectHooksDir(projectRoot) {
+  return join14(projectRoot, ".zelari", "hooks");
+}
+function createDefaultLifecycleHooks(projectRoot = process.cwd()) {
+  const runner = new LifecycleHookRunner();
+  const dirs = [globalHooksDir()];
+  if (isFolderTrusted(projectRoot)) {
+    dirs.push(projectHooksDir(projectRoot));
+  }
+  for (const dir of dirs) {
+    runner.loadDir(dir);
+  }
+  return runner;
+}
+var init_lifecycleHooks = __esm({
+  "src/cli/safety/lifecycleHooks.ts"() {
+    "use strict";
+    init_harness();
+    init_folderTrust();
+  }
+});
+
 // src/cli/tools/krakenModel.ts
 var krakenModel_exports = {};
 __export(krakenModel_exports, {
@@ -30887,6 +31336,9 @@ function createBuiltinToolRegistry(options = {}) {
   const safeWebSearch = wrapWithAudit(webSearchTool, audit, sessionId);
   const registry4 = new ToolRegistry();
   const profile = options.profile ?? "full";
+  const isParent = !options.profile || options.profile === "full";
+  const hooks = isParent ? options.lifecycleHooks ?? createDefaultLifecycleHooks(root) : null;
+  if (hooks) registry4.setLifecycleHooks(hooks);
   const readOnly = options.readOnly === true || options.planMode === true || profile === "explore";
   const verifyMode = profile === "verify";
   const allowMutators = !readOnly && !verifyMode;
@@ -31291,6 +31743,7 @@ var init_toolRegistry = __esm({
     init_worldModel();
     init_openai_compatible();
     init_toolPermissions();
+    init_lifecycleHooks();
     init_toolTypes();
     init_skills2();
     HARNESS_BUILTIN_NAMES = /* @__PURE__ */ new Set([
@@ -31311,12 +31764,12 @@ var init_toolRegistry = __esm({
 // src/cli/state/fileStateStore.ts
 import { createHash as createHash3, randomUUID as randomUUID2 } from "node:crypto";
 import { promises as fs14 } from "node:fs";
-import * as path26 from "node:path";
+import * as path28 from "node:path";
 function shortId() {
   return randomUUID2().replace(/-/g, "").slice(0, 12);
 }
 async function writeJsonAtomic(filePath, data) {
-  await fs14.mkdir(path26.dirname(filePath), { recursive: true });
+  await fs14.mkdir(path28.dirname(filePath), { recursive: true });
   const tmp = `${filePath}.${process.pid}.${Date.now()}.tmp`;
   await fs14.writeFile(tmp, JSON.stringify(data, null, 2) + "\n", "utf8");
   await fs14.rename(tmp, filePath);
@@ -31377,11 +31830,11 @@ var init_fileStateStore = __esm({
       indexPath = "";
       async init(projectRoot) {
         this.root = projectRoot;
-        this.stateDir = path26.join(projectRoot, ".zelari", "state");
-        this.commitsDir = path26.join(this.stateDir, "commits");
-        this.artifactsDir = path26.join(this.stateDir, "artifacts");
-        this.headPath = path26.join(this.stateDir, "HEAD.json");
-        this.indexPath = path26.join(this.stateDir, "index.jsonl");
+        this.stateDir = path28.join(projectRoot, ".zelari", "state");
+        this.commitsDir = path28.join(this.stateDir, "commits");
+        this.artifactsDir = path28.join(this.stateDir, "artifacts");
+        this.headPath = path28.join(this.stateDir, "HEAD.json");
+        this.indexPath = path28.join(this.stateDir, "index.jsonl");
         await fs14.mkdir(this.commitsDir, { recursive: true });
         await fs14.mkdir(this.artifactsDir, { recursive: true });
       }
@@ -31394,13 +31847,13 @@ var init_fileStateStore = __esm({
         const discoveries = input.discoveries ?? [];
         const parent = await this.head();
         const id = shortId();
-        const artifactRel = path26.join("artifacts", id);
-        const artifactAbs = path26.join(this.artifactsDir, id);
+        const artifactRel = path28.join("artifacts", id);
+        const artifactAbs = path28.join(this.artifactsDir, id);
         await fs14.mkdir(artifactAbs, { recursive: true });
         const summary = defaultSummary(input, discoveries);
-        await fs14.writeFile(path26.join(artifactAbs, "summary.md"), summary + "\n", "utf8");
-        await writeJsonAtomic(path26.join(artifactAbs, "discoveries.json"), discoveries);
-        await writeJsonAtomic(path26.join(artifactAbs, "verification.json"), input.verification);
+        await fs14.writeFile(path28.join(artifactAbs, "summary.md"), summary + "\n", "utf8");
+        await writeJsonAtomic(path28.join(artifactAbs, "discoveries.json"), discoveries);
+        await writeJsonAtomic(path28.join(artifactAbs, "verification.json"), input.verification);
         const meta3 = {
           id,
           parentId: parent?.id ?? null,
@@ -31412,14 +31865,14 @@ var init_fileStateStore = __esm({
           workspaceCheckpointId: input.workspaceCheckpointId,
           verification: {
             ...input.verification,
-            reportPath: input.verification.reportPath ?? path26.join(".zelari", "state", artifactRel, "verification.json").replace(/\\/g, "/")
+            reportPath: input.verification.reportPath ?? path28.join(".zelari", "state", artifactRel, "verification.json").replace(/\\/g, "/")
           },
           changedPaths: input.changedPaths ?? [],
           stablePromptHash: input.stablePromptHash,
           discoveryCount: discoveries.length,
           artifactDir: artifactRel.replace(/\\/g, "/")
         };
-        await writeJsonAtomic(path26.join(this.commitsDir, `${id}.json`), meta3);
+        await writeJsonAtomic(path28.join(this.commitsDir, `${id}.json`), meta3);
         await writeJsonAtomic(this.headPath, { id, updatedAt: meta3.createdAt });
         await fs14.appendFile(this.indexPath, JSON.stringify({ id, createdAt: meta3.createdAt, label: meta3.label }) + "\n", "utf8");
         return stripStored(meta3);
@@ -31430,7 +31883,7 @@ var init_fileStateStore = __esm({
         return this.get(head.id);
       }
       async get(id) {
-        const stored = await readJsonFile(path26.join(this.commitsDir, `${id}.json`));
+        const stored = await readJsonFile(path28.join(this.commitsDir, `${id}.json`));
         return stored ? stripStored(stored) : null;
       }
       async list(limit = 20) {
@@ -31469,9 +31922,9 @@ var init_fileStateStore = __esm({
       async loadDiscoveries(id) {
         const meta3 = id ? await this.get(id) : await this.head();
         if (!meta3) return [];
-        const stored = await readJsonFile(path26.join(this.commitsDir, `${meta3.id}.json`));
+        const stored = await readJsonFile(path28.join(this.commitsDir, `${meta3.id}.json`));
         if (!stored?.artifactDir) return [];
-        const discPath = path26.join(this.stateDir, stored.artifactDir, "discoveries.json");
+        const discPath = path28.join(this.stateDir, stored.artifactDir, "discoveries.json");
         return await readJsonFile(discPath) ?? [];
       }
       async materializeContext(id, maxChars = DEFAULT_MATERIALIZE_CHARS) {
@@ -31917,8 +32370,8 @@ __export(conversationContext_exports, {
   setHistory: () => setHistory,
   setLastClarification: () => setLastClarification
 });
-import { existsSync as existsSync18 } from "node:fs";
-import { join as join15 } from "node:path";
+import { existsSync as existsSync19 } from "node:fs";
+import { join as join16 } from "node:path";
 function getHistory() {
   return history;
 }
@@ -31926,7 +32379,7 @@ function setHistory(messages) {
   history = [...messages];
 }
 function compactInPlace(cwd = process.cwd()) {
-  const durableStatePresent = existsSync18(join15(cwd, ".zelari", "state", "HEAD.json"));
+  const durableStatePresent = existsSync19(join16(cwd, ".zelari", "state", "HEAD.json"));
   history = compactHistory(history, { durableStatePresent });
 }
 function appendMessages(msgs) {
@@ -32315,7 +32768,7 @@ var claudeProvider_exports = {};
 __export(claudeProvider_exports, {
   createLocalCliProvider: () => createLocalCliProvider
 });
-import { spawn as spawn6 } from "node:child_process";
+import { spawn as spawn7 } from "node:child_process";
 function waitForExit(child, timeoutMs = 2e3) {
   return new Promise((resolve3) => {
     if (child.exitCode != null) return resolve3(child.exitCode);
@@ -32344,7 +32797,7 @@ function createLocalCliProvider(opts = {}) {
         );
       }
     }
-    const spawnFn = opts.spawnFn ?? spawn6;
+    const spawnFn = opts.spawnFn ?? spawn7;
     let child;
     try {
       child = spawnFn(cli, args, {
@@ -32439,14 +32892,14 @@ var init_claudeProvider = __esm({
 });
 
 // src/cli/workspace/projectInstructions.ts
-import { existsSync as existsSync19, readFileSync as readFileSync17 } from "node:fs";
-import { join as join16 } from "node:path";
+import { existsSync as existsSync20, readFileSync as readFileSync19 } from "node:fs";
+import { join as join17 } from "node:path";
 function loadProjectInstructions(projectRoot = process.cwd(), maxChars = MAX_CHARS) {
   for (const name of CANDIDATES) {
-    const full = join16(projectRoot, name);
-    if (!existsSync19(full)) continue;
+    const full = join17(projectRoot, name);
+    if (!existsSync20(full)) continue;
     try {
-      let raw = readFileSync17(full, "utf8");
+      let raw = readFileSync19(full, "utf8");
       raw = raw.replace(/\r\n/g, "\n").trim();
       if (!raw) continue;
       if (raw.length <= maxChars) {
@@ -32483,20 +32936,20 @@ var init_projectInstructions = __esm({
 
 // src/cli/workspace/paths.ts
 import {
-  mkdirSync as mkdirSync10,
-  writeFileSync as writeFileSync12,
-  existsSync as existsSync20,
+  mkdirSync as mkdirSync11,
+  writeFileSync as writeFileSync13,
+  existsSync as existsSync21,
   accessSync,
   constants,
   realpathSync
 } from "node:fs";
-import { join as join17, basename } from "node:path";
-import { homedir as homedir7 } from "node:os";
+import { join as join18, basename } from "node:path";
+import { homedir as homedir9 } from "node:os";
 import { createHash as createHash4 } from "node:crypto";
 function resolveWorkspaceRoot(projectRoot = process.cwd()) {
   const candidates = [
-    join17(projectRoot, ".zelari"),
-    join17(homedir7(), ".zelari-code", "workspace", hashProject(projectRoot))
+    join18(projectRoot, ".zelari"),
+    join18(homedir9(), ".zelari-code", "workspace", hashProject(projectRoot))
   ];
   for (const candidate of candidates) {
     if (isWritableDir(projectRoot) || candidate !== candidates[0]) {
@@ -32512,7 +32965,7 @@ function hashProject(projectPath) {
 }
 function isWritableDir(dir) {
   try {
-    if (!existsSync20(dir)) return false;
+    if (!existsSync21(dir)) return false;
     accessSync(dir, constants.W_OK);
     return true;
   } catch {
@@ -32520,26 +32973,26 @@ function isWritableDir(dir) {
   }
 }
 function ensureWorkspaceDir(workspaceDir) {
-  mkdirSync10(workspaceDir, { recursive: true });
-  if (workspaceDir.endsWith("/.zelari") && existsSync20(join17(workspaceDir, "..", ".git"))) {
-    const gitignorePath = join17(workspaceDir, ".gitignore");
-    if (!existsSync20(gitignorePath)) {
-      writeFileSync12(gitignorePath, "*\n!.gitignore\n");
+  mkdirSync11(workspaceDir, { recursive: true });
+  if (workspaceDir.endsWith("/.zelari") && existsSync21(join18(workspaceDir, "..", ".git"))) {
+    const gitignorePath = join18(workspaceDir, ".gitignore");
+    if (!existsSync21(gitignorePath)) {
+      writeFileSync13(gitignorePath, "*\n!.gitignore\n");
     }
   }
 }
 function workspaceFile(rootDir, kind) {
   switch (kind) {
     case "plan":
-      return join17(rootDir, "plan.md");
+      return join18(rootDir, "plan.md");
     case "risks":
-      return join17(rootDir, "risks.md");
+      return join18(rootDir, "risks.md");
     case "index":
-      return join17(rootDir, "workspace.json");
+      return join18(rootDir, "workspace.json");
   }
 }
 function workspaceArtifact(rootDir, subdir, slug) {
-  return join17(rootDir, subdir, `${slug}.md`);
+  return join18(rootDir, subdir, `${slug}.md`);
 }
 function projectName(projectRoot = process.cwd()) {
   return basename(realpathSync(projectRoot));
@@ -32559,8 +33012,8 @@ __export(workspaceSummary_exports, {
   buildWorkspaceSummary: () => buildWorkspaceSummary,
   buildZelariReadHint: () => buildZelariReadHint
 });
-import { existsSync as existsSync21, readFileSync as readFileSync18, readdirSync as readdirSync3, statSync as statSync3 } from "node:fs";
-import { join as join18, relative } from "node:path";
+import { existsSync as existsSync22, readFileSync as readFileSync20, readdirSync as readdirSync4, statSync as statSync3 } from "node:fs";
+import { join as join19, relative } from "node:path";
 function buildWorkspaceSummary(projectRoot = process.cwd(), options = {}) {
   const { maxEntries = 30, maxChars = 3500, maxDeps = 24, maxScripts = 16 } = options;
   const name = safeProjectName(projectRoot);
@@ -32593,11 +33046,11 @@ function formatTaskLine(t) {
 }
 function buildPlanSummary(projectRoot = process.cwd(), options) {
   const zelariRoot = resolveWorkspaceRoot(projectRoot);
-  const planPath = join18(zelariRoot, "plan.json");
-  if (!existsSync21(planPath)) return null;
+  const planPath = join19(zelariRoot, "plan.json");
+  if (!existsSync22(planPath)) return null;
   let plan;
   try {
-    plan = JSON.parse(readFileSync18(planPath, "utf8"));
+    plan = JSON.parse(readFileSync20(planPath, "utf8"));
   } catch {
     return null;
   }
@@ -32733,8 +33186,8 @@ function pickNextTask(open) {
   )[0];
 }
 function buildZelariReadHint(projectRoot = process.cwd()) {
-  const planPath = join18(resolveWorkspaceRoot(projectRoot), "plan.json");
-  if (!existsSync21(planPath)) return "";
+  const planPath = join19(resolveWorkspaceRoot(projectRoot), "plan.json");
+  if (!existsSync22(planPath)) return "";
   return [
     "# Council workspace detected (.zelari/) \u2014 DRAFT vault",
     "`.zelari/plan.json` and `.zelari/docs/` hold **design hypotheses**, not verified product state.",
@@ -32749,10 +33202,10 @@ function safeProjectName(root) {
   }
 }
 function readPackageJson(projectRoot) {
-  const p3 = join18(projectRoot, "package.json");
-  if (!existsSync21(p3)) return null;
+  const p3 = join19(projectRoot, "package.json");
+  if (!existsSync22(p3)) return null;
   try {
-    return JSON.parse(readFileSync18(p3, "utf8"));
+    return JSON.parse(readFileSync20(p3, "utf8"));
   } catch {
     return null;
   }
@@ -32793,7 +33246,7 @@ function readBuildScripts(projectRoot, maxScripts = 16) {
 function listShallow(projectRoot, maxEntries) {
   const out = [];
   try {
-    const top = readdirSync3(projectRoot, { withFileTypes: true }).filter(
+    const top = readdirSync4(projectRoot, { withFileTypes: true }).filter(
       (e) => !e.name.startsWith(".") && e.name !== "node_modules" && e.name !== "dist"
     ).sort((a, b) => a.name.localeCompare(b.name));
     let count = 0;
@@ -32802,11 +33255,11 @@ function listShallow(projectRoot, maxEntries) {
         out.push(`\u2026 (+${top.length - count} more)`);
         break;
       }
-      const rel2 = relative(projectRoot, join18(projectRoot, entry.name));
+      const rel2 = relative(projectRoot, join19(projectRoot, entry.name));
       if (entry.isDirectory()) {
         let inner = "";
         try {
-          const sub = readdirSync3(join18(projectRoot, entry.name), {
+          const sub = readdirSync4(join19(projectRoot, entry.name), {
             withFileTypes: true
           }).filter((e) => !e.name.startsWith(".")).slice(0, 4).map((e) => e.name);
           if (sub.length > 0)
@@ -32854,12 +33307,12 @@ var init_workspaceSummary = __esm({
 });
 
 // src/cli/workspace/buildLessonsSummary.ts
-import { existsSync as existsSync22 } from "node:fs";
-import { join as join19 } from "node:path";
+import { existsSync as existsSync23 } from "node:fs";
+import { join as join20 } from "node:path";
 function buildLessonsSummary(projectRoot = process.cwd(), taskText) {
   if (process.env["ZELARI_LESSONS"] === "0") return null;
   const zelariRoot = resolveWorkspaceRoot(projectRoot);
-  if (!existsSync22(join19(zelariRoot, "lessons.jsonl"))) return null;
+  if (!existsSync23(join20(zelariRoot, "lessons.jsonl"))) return null;
   const lessons = recallLessons(zelariRoot, {
     maxLessons: 5,
     maxBytes: 2048,
@@ -32880,8 +33333,8 @@ var composeContext_exports = {};
 __export(composeContext_exports, {
   composeProjectContext: () => composeProjectContext
 });
-import { existsSync as existsSync23, readdirSync as readdirSync4, readFileSync as readFileSync19 } from "node:fs";
-import { join as join20 } from "node:path";
+import { existsSync as existsSync24, readdirSync as readdirSync5, readFileSync as readFileSync21 } from "node:fs";
+import { join as join21 } from "node:path";
 function cap2(text, max, label) {
   if (!text || text.length <= max) return { text: text || "", truncated: false };
   return {
@@ -32893,19 +33346,19 @@ function cap2(text, max, label) {
 }
 function buildDesignIndex(projectRoot, maxChars) {
   const root = resolveWorkspaceRoot(projectRoot);
-  if (!existsSync23(root)) return "";
+  if (!existsSync24(root)) return "";
   const lines = [
     "# Design vault index (.zelari/) \u2014 HYPOTHESES only",
     "Full design docs are NOT product source of truth. Open with list_files / read_file / searchDocuments if needed."
   ];
-  const docsDir = join20(root, "docs");
-  if (existsSync23(docsDir)) {
+  const docsDir = join21(root, "docs");
+  if (existsSync24(docsDir)) {
     try {
-      const docs = readdirSync4(docsDir).filter((n) => n.endsWith(".md")).slice(0, 12);
+      const docs = readdirSync5(docsDir).filter((n) => n.endsWith(".md")).slice(0, 12);
       if (docs.length > 0) {
         lines.push("", "## docs/ (titles only)");
         for (const d of docs) lines.push(`- .zelari/docs/${d}`);
-        if (readdirSync4(docsDir).filter((n) => n.endsWith(".md")).length > 12) {
+        if (readdirSync5(docsDir).filter((n) => n.endsWith(".md")).length > 12) {
           lines.push("- \u2026 (more under .zelari/docs/)");
         }
       }
@@ -32913,14 +33366,14 @@ function buildDesignIndex(projectRoot, maxChars) {
     }
   }
   for (const name of ["risks.md", "plan.json", "nfr-spec.json"]) {
-    if (existsSync23(join20(root, name))) {
+    if (existsSync24(join21(root, name))) {
       lines.push(`- .zelari/${name} present`);
     }
   }
-  const decisionsDir = join20(root, "decisions");
-  if (existsSync23(decisionsDir)) {
+  const decisionsDir = join21(root, "decisions");
+  if (existsSync24(decisionsDir)) {
     try {
-      const n = readdirSync4(decisionsDir).filter((f) => f.endsWith(".md")).length;
+      const n = readdirSync5(decisionsDir).filter((f) => f.endsWith(".md")).length;
       if (n > 0) lines.push(`- .zelari/decisions/ (${n} ADR file(s) \u2014 treat proposed as non-binding)`);
     } catch {
     }
@@ -33019,17 +33472,17 @@ function composeProjectContext(input) {
 }
 function readDurableHeadSync(projectRoot) {
   try {
-    const headPath = join20(projectRoot, ".zelari", "state", "HEAD.json");
-    if (!existsSync23(headPath)) return "";
-    const head = JSON.parse(readFileSync19(headPath, "utf8"));
+    const headPath = join21(projectRoot, ".zelari", "state", "HEAD.json");
+    if (!existsSync24(headPath)) return "";
+    const head = JSON.parse(readFileSync21(headPath, "utf8"));
     if (!head?.id) return "";
-    const metaPath = join20(projectRoot, ".zelari", "state", "commits", `${head.id}.json`);
-    if (!existsSync23(metaPath)) return "";
-    const meta3 = JSON.parse(readFileSync19(metaPath, "utf8"));
-    const discPath = meta3.artifactDir ? join20(projectRoot, ".zelari", "state", meta3.artifactDir, "discoveries.json") : join20(projectRoot, ".zelari", "state", "artifacts", head.id, "discoveries.json");
+    const metaPath = join21(projectRoot, ".zelari", "state", "commits", `${head.id}.json`);
+    if (!existsSync24(metaPath)) return "";
+    const meta3 = JSON.parse(readFileSync21(metaPath, "utf8"));
+    const discPath = meta3.artifactDir ? join21(projectRoot, ".zelari", "state", meta3.artifactDir, "discoveries.json") : join21(projectRoot, ".zelari", "state", "artifacts", head.id, "discoveries.json");
     let discoveries = [];
-    if (existsSync23(discPath)) {
-      discoveries = JSON.parse(readFileSync19(discPath, "utf8"));
+    if (existsSync24(discPath)) {
+      discoveries = JSON.parse(readFileSync21(discPath, "utf8"));
     }
     const reusable = discoveries.filter((d) => d.reusable !== false);
     const lines = [
@@ -33062,13 +33515,13 @@ var planDetect_exports = {};
 __export(planDetect_exports, {
   hasWorkspacePlan: () => hasWorkspacePlan
 });
-import { existsSync as existsSync24, readFileSync as readFileSync20 } from "node:fs";
-import { join as join21 } from "node:path";
+import { existsSync as existsSync25, readFileSync as readFileSync22 } from "node:fs";
+import { join as join22 } from "node:path";
 function hasWorkspacePlan(projectRoot = process.cwd()) {
-  const planPath = join21(resolveWorkspaceRoot(projectRoot), "plan.json");
-  if (!existsSync24(planPath)) return false;
+  const planPath = join22(resolveWorkspaceRoot(projectRoot), "plan.json");
+  if (!existsSync25(planPath)) return false;
   try {
-    const parsed = JSON.parse(readFileSync20(planPath, "utf8"));
+    const parsed = JSON.parse(readFileSync22(planPath, "utf8"));
     return Array.isArray(parsed.phases) && parsed.phases.length > 0;
   } catch {
     return false;
@@ -33128,14 +33581,14 @@ __export(storage_exports, {
   workspaceMutex: () => workspaceMutex
 });
 import {
-  readFileSync as readFileSync21,
-  writeFileSync as writeFileSync13,
-  existsSync as existsSync25,
-  mkdirSync as mkdirSync11,
-  readdirSync as readdirSync5,
+  readFileSync as readFileSync23,
+  writeFileSync as writeFileSync14,
+  existsSync as existsSync26,
+  mkdirSync as mkdirSync12,
+  readdirSync as readdirSync6,
   renameSync as renameSync2
 } from "node:fs";
-import { dirname as dirname4, join as join22 } from "node:path";
+import { dirname as dirname4, join as join23 } from "node:path";
 function parseFrontmatter(md) {
   const m = FRONTMATTER_RE.exec(md);
   if (!m) return { meta: {}, body: md };
@@ -33389,33 +33842,33 @@ var init_storage = __esm({
     VALID_SCALARS = /^(true|false|null|~)$/i;
     Storage = class {
       /** Read a Markdown file with frontmatter. Throws if not found. */
-      read(path48) {
-        if (!existsSync25(path48)) {
-          throw new Error(`File not found: ${path48}`);
+      read(path51) {
+        if (!existsSync26(path51)) {
+          throw new Error(`File not found: ${path51}`);
         }
-        const md = readFileSync21(path48, "utf8");
+        const md = readFileSync23(path51, "utf8");
         return parseFrontmatter(md);
       }
       /** Read a Markdown file; returns null if not found. */
-      readIfExists(path48) {
-        if (!existsSync25(path48)) return null;
-        return this.read(path48);
+      readIfExists(path51) {
+        if (!existsSync26(path51)) return null;
+        return this.read(path51);
       }
       /**
        * Write a Markdown file atomically (tmp + rename). Creates parent dirs.
        * The meta object is serialized as YAML frontmatter; body as Markdown.
        */
-      write(path48, meta3, body) {
-        mkdirSync11(dirname4(path48), { recursive: true });
-        const tmp = path48 + ".tmp-" + process.pid;
+      write(path51, meta3, body) {
+        mkdirSync12(dirname4(path51), { recursive: true });
+        const tmp = path51 + ".tmp-" + process.pid;
         const md = serializeFrontmatter(meta3, body);
-        writeFileSync13(tmp, md, "utf8");
-        renameSync2(tmp, path48);
+        writeFileSync14(tmp, md, "utf8");
+        renameSync2(tmp, path51);
       }
       /** List all .md files in a directory (non-recursive). */
       listMarkdown(dir) {
-        if (!existsSync25(dir)) return [];
-        return readdirSync5(dir).filter((f) => f.endsWith(".md") && !f.startsWith(".")).map((f) => join22(dir, f));
+        if (!existsSync26(dir)) return [];
+        return readdirSync6(dir).filter((f) => f.endsWith(".md") && !f.startsWith(".")).map((f) => join23(dir, f));
       }
     };
     KeyedMutex = class {
@@ -33454,14 +33907,14 @@ __export(stubs_exports, {
   resolveWorkspaceRoot: () => resolveWorkspaceRoot
 });
 import {
-  existsSync as existsSync26,
-  readdirSync as readdirSync6,
-  writeFileSync as writeFileSync14,
-  readFileSync as readFileSync22,
-  mkdirSync as mkdirSync12,
+  existsSync as existsSync27,
+  readdirSync as readdirSync7,
+  writeFileSync as writeFileSync15,
+  readFileSync as readFileSync24,
+  mkdirSync as mkdirSync13,
   renameSync as renameSync3
 } from "node:fs";
-import { join as join23, basename as basename2, dirname as dirname5, relative as relative2 } from "node:path";
+import { join as join24, basename as basename2, dirname as dirname5, relative as relative2 } from "node:path";
 function createWorkspaceContext(projectRoot = process.cwd()) {
   const rootDir = resolveWorkspaceRoot(projectRoot);
   return {
@@ -33471,14 +33924,14 @@ function createWorkspaceContext(projectRoot = process.cwd()) {
   };
 }
 function planJsonPath(ctx) {
-  return join23(ctx.rootDir, "plan.json");
+  return join24(ctx.rootDir, "plan.json");
 }
 function readPlan(ctx) {
   const jsonPath = planJsonPath(ctx);
-  if (existsSync26(jsonPath)) {
+  if (existsSync27(jsonPath)) {
     try {
       const parsed = JSON.parse(
-        readFileSync22(jsonPath, "utf8")
+        readFileSync24(jsonPath, "utf8")
       );
       return {
         phases: Array.isArray(parsed.phases) ? parsed.phases : [],
@@ -33488,8 +33941,8 @@ function readPlan(ctx) {
     } catch {
     }
   }
-  const path48 = workspaceFile(ctx.rootDir, "plan");
-  const doc = ctx.storage.readIfExists(path48);
+  const path51 = workspaceFile(ctx.rootDir, "plan");
+  const doc = ctx.storage.readIfExists(path51);
   if (!doc) return { phases: [], tasks: [], milestones: [] };
   const meta3 = doc.meta;
   return {
@@ -33500,9 +33953,9 @@ function readPlan(ctx) {
 }
 function writePlan(ctx, summary) {
   const jsonPath = planJsonPath(ctx);
-  mkdirSync12(dirname5(jsonPath), { recursive: true });
+  mkdirSync13(dirname5(jsonPath), { recursive: true });
   const tmp = jsonPath + ".tmp-" + process.pid;
-  writeFileSync14(tmp, JSON.stringify(summary, null, 2), "utf8");
+  writeFileSync15(tmp, JSON.stringify(summary, null, 2), "utf8");
   renameSync3(tmp, jsonPath);
   const mdPath = workspaceFile(ctx.rootDir, "plan");
   const summaryMeta = {
@@ -33569,9 +34022,9 @@ function renderPlanBody(summary) {
   return lines.join("\n");
 }
 function nextAdrId(ctx) {
-  const decisionsDir = join23(ctx.rootDir, "decisions");
-  if (!existsSync26(decisionsDir)) return "001";
-  const existing = readdirSync6(decisionsDir).filter((f) => f.endsWith(".md")).map((f) => f.match(/^(\d+)-/)).filter((m) => !!m).map((m) => parseInt(m[1], 10));
+  const decisionsDir = join24(ctx.rootDir, "decisions");
+  if (!existsSync27(decisionsDir)) return "001";
+  const existing = readdirSync7(decisionsDir).filter((f) => f.endsWith(".md")).map((f) => f.match(/^(\d+)-/)).filter((m) => !!m).map((m) => parseInt(m[1], 10));
   const max = existing.length === 0 ? 0 : Math.max(...existing);
   return String(max + 1).padStart(3, "0");
 }
@@ -33612,7 +34065,7 @@ function addTaskRecord(ctx, summary, phaseId, t, options) {
     status: "pending",
     priority: t.priority
   });
-  const taskPath = join23(ctx.rootDir, "plan-tasks", `${id}.md`);
+  const taskPath = join24(ctx.rootDir, "plan-tasks", `${id}.md`);
   const meta3 = {
     kind: "task",
     id,
@@ -33654,7 +34107,7 @@ function addMilestoneRecord(ctx, summary, input) {
     dueDate: input.dueDate,
     targetVersion: version2
   });
-  const path48 = join23(ctx.rootDir, "milestones", `${id}.md`);
+  const path51 = join24(ctx.rootDir, "milestones", `${id}.md`);
   const meta3 = {
     kind: "milestone",
     id,
@@ -33671,7 +34124,7 @@ function addMilestoneRecord(ctx, summary, input) {
     `Target version: ${version2}`,
     ""
   ].join("\n");
-  ctx.storage.write(path48, meta3, body);
+  ctx.storage.write(path51, meta3, body);
   return { id, created: true };
 }
 function readPlanSummary(ctx) {
@@ -33875,7 +34328,7 @@ function addIdeaStub(ctx) {
         const tags = args["tags"] ?? [];
         const category = args["category"] ?? "General";
         const id = `${nextAdrId(ctx)}-${slugify3(title)}`;
-        const path48 = workspaceArtifact(ctx.rootDir, "decisions", id);
+        const path51 = workspaceArtifact(ctx.rootDir, "decisions", id);
         const meta3 = {
           kind: "adr",
           status: "proposed",
@@ -33901,7 +34354,7 @@ function addIdeaStub(ctx) {
           ...consequences.map((c) => `- ${c}`),
           ""
         ].join("\n");
-        ctx.storage.write(path48, meta3, body);
+        ctx.storage.write(path51, meta3, body);
         return `ADR ${id} created: "${title}". Status: proposed. Promote to accepted via /update ADR or manual edit.`;
       });
     }
@@ -33952,8 +34405,8 @@ function createNfrSpecStub(ctx) {
           },
           planFeatureKeywords: Array.isArray(args["planFeatureKeywords"]) ? args["planFeatureKeywords"] : void 0
         };
-        const outPath = join23(ctx.rootDir, "nfr-spec.json");
-        writeFileSync14(outPath, JSON.stringify(spec, null, 2), "utf8");
+        const outPath = join24(ctx.rootDir, "nfr-spec.json");
+        writeFileSync15(outPath, JSON.stringify(spec, null, 2), "utf8");
         return `NFR spec written to nfr-spec.json (${targets.length} target(s)).`;
       });
     }
@@ -33983,14 +34436,14 @@ function createDocumentStub(ctx) {
           ctx.storage.write(risksPath, riskMeta, content);
           return `Document "${title}" created at risks.md (workspace root).`;
         }
-        const path48 = workspaceArtifact(ctx.rootDir, "docs", slug);
+        const path51 = workspaceArtifact(ctx.rootDir, "docs", slug);
         const meta3 = {
           kind: "doc",
           id: slug,
           date: (/* @__PURE__ */ new Date()).toISOString().slice(0, 10),
           tags
         };
-        ctx.storage.write(path48, meta3, content);
+        ctx.storage.write(path51, meta3, content);
         return `Document "${title}" created at docs/${slug}.md.`;
       });
     }
@@ -34016,18 +34469,18 @@ function searchDocumentsStub(ctx) {
         (w) => w.length >= 3 && w !== "or" && w !== "and" && w !== "the"
       );
       const files = [
-        ...ctx.storage.listMarkdown(join23(ctx.rootDir, "decisions")),
-        ...ctx.storage.listMarkdown(join23(ctx.rootDir, "docs")),
-        ...ctx.storage.listMarkdown(join23(ctx.rootDir, "reviews")),
-        ...ctx.storage.listMarkdown(join23(ctx.rootDir, "plan-tasks")),
-        ...ctx.storage.listMarkdown(join23(ctx.rootDir, "milestones")),
+        ...ctx.storage.listMarkdown(join24(ctx.rootDir, "decisions")),
+        ...ctx.storage.listMarkdown(join24(ctx.rootDir, "docs")),
+        ...ctx.storage.listMarkdown(join24(ctx.rootDir, "reviews")),
+        ...ctx.storage.listMarkdown(join24(ctx.rootDir, "plan-tasks")),
+        ...ctx.storage.listMarkdown(join24(ctx.rootDir, "milestones")),
         workspaceFile(ctx.rootDir, "plan"),
         workspaceFile(ctx.rootDir, "risks")
       ];
       const results = [];
       for (const file2 of files) {
-        if (!existsSync26(file2)) continue;
-        const raw = readFileSync22(file2, "utf8");
+        if (!existsSync27(file2)) continue;
+        const raw = readFileSync24(file2, "utf8");
         const content = raw.toLowerCase();
         let idx = -1;
         let matchLen = 0;
@@ -34078,9 +34531,9 @@ function linkDocumentsStub(ctx) {
         const toId = args["toId"] ?? args["targetId"] ?? args["targetPathOrTitle"];
         if (!fromId || !toId) return "linkDocuments requires fromId and toId.";
         const allFiles = [
-          ...ctx.storage.listMarkdown(join23(ctx.rootDir, "decisions")),
-          ...ctx.storage.listMarkdown(join23(ctx.rootDir, "docs")),
-          ...ctx.storage.listMarkdown(join23(ctx.rootDir, "reviews"))
+          ...ctx.storage.listMarkdown(join24(ctx.rootDir, "decisions")),
+          ...ctx.storage.listMarkdown(join24(ctx.rootDir, "docs")),
+          ...ctx.storage.listMarkdown(join24(ctx.rootDir, "reviews"))
         ];
         const source = allFiles.find((f) => {
           try {
@@ -34111,9 +34564,9 @@ function getDocumentBacklinksStub(ctx) {
       const targetId = args["targetId"] ?? args["id"];
       if (!targetId) return "getDocumentBacklinks requires targetId.";
       const allFiles = [
-        ...ctx.storage.listMarkdown(join23(ctx.rootDir, "decisions")),
-        ...ctx.storage.listMarkdown(join23(ctx.rootDir, "docs")),
-        ...ctx.storage.listMarkdown(join23(ctx.rootDir, "reviews"))
+        ...ctx.storage.listMarkdown(join24(ctx.rootDir, "decisions")),
+        ...ctx.storage.listMarkdown(join24(ctx.rootDir, "docs")),
+        ...ctx.storage.listMarkdown(join24(ctx.rootDir, "reviews"))
       ];
       const backlinks = [];
       for (const file2 of allFiles) {
@@ -34207,21 +34660,21 @@ __export(updater_exports, {
   resolveBundledNpmCli: () => resolveBundledNpmCli
 });
 import { createRequire as createRequire2 } from "node:module";
-import { spawn as spawn7 } from "node:child_process";
-import { existsSync as existsSync27 } from "node:fs";
-import path27 from "node:path";
+import { spawn as spawn8 } from "node:child_process";
+import { existsSync as existsSync28 } from "node:fs";
+import path29 from "node:path";
 import { fileURLToPath } from "node:url";
 function resolveBundledNpmCli(execPath = process.execPath) {
-  const dir = path27.dirname(execPath);
+  const dir = path29.dirname(execPath);
   const candidates = [
     // Windows: C:\...\node.exe → C:\...\node_modules\npm\bin\npm-cli.js
-    path27.join(dir, "node_modules", "npm", "bin", "npm-cli.js"),
+    path29.join(dir, "node_modules", "npm", "bin", "npm-cli.js"),
     // POSIX: <prefix>/bin/node → <prefix>/lib/node_modules/npm/bin/npm-cli.js
-    path27.join(dir, "..", "lib", "node_modules", "npm", "bin", "npm-cli.js")
+    path29.join(dir, "..", "lib", "node_modules", "npm", "bin", "npm-cli.js")
   ];
   for (const candidate of candidates) {
     try {
-      if (existsSync27(candidate)) return candidate;
+      if (existsSync28(candidate)) return candidate;
     } catch {
     }
   }
@@ -34234,7 +34687,7 @@ function looksLikeBrokenShim(exitCode, output) {
 }
 function getCurrentVersion() {
   try {
-    const pkgPath = path27.resolve(__dirname2, "..", "..", "package.json");
+    const pkgPath = path29.resolve(__dirname2, "..", "..", "package.json");
     const pkg = require2(pkgPath);
     return pkg.version;
   } catch {
@@ -34294,7 +34747,7 @@ async function checkForUpdate(fetcher = fetch, registryUrl) {
     updateAvailable: cmp < 0
   };
 }
-async function performUpdate(packageName = "zelari-code", executor = spawn7, resolveNpmCli = resolveBundledNpmCli) {
+async function performUpdate(packageName = "zelari-code", executor = spawn8, resolveNpmCli = resolveBundledNpmCli) {
   const args = ["install", "-g", `${packageName}@latest`];
   const primary = await runNpm(executor, args, "shim");
   if (primary.ok) return primary;
@@ -34346,13 +34799,13 @@ var init_updater = __esm({
     "use strict";
     init_cmdline();
     require2 = createRequire2(import.meta.url);
-    __dirname2 = path27.dirname(fileURLToPath(import.meta.url));
+    __dirname2 = path29.dirname(fileURLToPath(import.meta.url));
     REGISTRY_URL = "https://registry.npmjs.org/zelari-code/latest";
   }
 });
 
 // src/cli/mcp/mcpClient.ts
-import { spawn as spawn8 } from "node:child_process";
+import { spawn as spawn9 } from "node:child_process";
 var DEFAULT_REQUEST_TIMEOUT_MS, INIT_TIMEOUT_MS, MCP_PROTOCOL_VERSION, McpClient;
 var init_mcpClient = __esm({
   "src/cli/mcp/mcpClient.ts"() {
@@ -34380,10 +34833,10 @@ var init_mcpClient = __esm({
           env: { ...process.env, ...this.config.env ?? {} },
           windowsHide: true
         };
-        const child = process.platform === "win32" ? spawn8(buildCmdLine(this.config.command, this.config.args ?? []), {
+        const child = process.platform === "win32" ? spawn9(buildCmdLine(this.config.command, this.config.args ?? []), {
           ...spawnOpts,
           shell: true
-        }) : spawn8(this.config.command, this.config.args ?? [], spawnOpts);
+        }) : spawn9(this.config.command, this.config.args ?? [], spawnOpts);
         this.child = child;
         child.stdout.setEncoding("utf8");
         child.stdout.on("data", (chunk) => this.onStdout(chunk));
@@ -34521,23 +34974,23 @@ var init_mcpClient = __esm({
 
 // src/cli/mcp/mcpConfigIo.ts
 import {
-  existsSync as existsSync28,
-  mkdirSync as mkdirSync13,
-  readFileSync as readFileSync23,
-  writeFileSync as writeFileSync15
+  existsSync as existsSync29,
+  mkdirSync as mkdirSync14,
+  readFileSync as readFileSync25,
+  writeFileSync as writeFileSync16
 } from "node:fs";
-import { dirname as dirname6, join as join24 } from "node:path";
-import { homedir as homedir8 } from "node:os";
+import { dirname as dirname6, join as join25 } from "node:path";
+import { homedir as homedir10 } from "node:os";
 function getUserMcpPath() {
-  return join24(homedir8(), ".zelari-code", "mcp.json");
+  return join25(homedir10(), ".zelari-code", "mcp.json");
 }
 function getProjectMcpPath(projectRoot) {
-  return join24(projectRoot, ".zelari", "mcp.json");
+  return join25(projectRoot, ".zelari", "mcp.json");
 }
-function readFile2(path48) {
-  if (!existsSync28(path48)) return {};
+function readFile2(path51) {
+  if (!existsSync29(path51)) return {};
   try {
-    const parsed = JSON.parse(readFileSync23(path48, "utf8"));
+    const parsed = JSON.parse(readFileSync25(path51, "utf8"));
     const out = {};
     for (const [name, cfg] of Object.entries(parsed.mcpServers ?? {})) {
       if (!cfg || typeof cfg.command !== "string" || !cfg.command.trim()) continue;
@@ -34553,10 +35006,10 @@ function readFile2(path48) {
     return {};
   }
 }
-function writeFile(path48, servers) {
-  mkdirSync13(dirname6(path48), { recursive: true });
+function writeFile(path51, servers) {
+  mkdirSync14(dirname6(path51), { recursive: true });
   const body = { mcpServers: servers };
-  writeFileSync15(path48, `${JSON.stringify(body, null, 2)}
+  writeFileSync16(path51, `${JSON.stringify(body, null, 2)}
 `, "utf8");
 }
 function listMcpServers(projectRoot) {
@@ -34589,9 +35042,9 @@ function upsertMcpServer(opts) {
   if (!opts.config.command?.trim()) {
     return { ok: false, error: "command is required" };
   }
-  let path48;
+  let path51;
   if (opts.scope === "user") {
-    path48 = getUserMcpPath();
+    path51 = getUserMcpPath();
   } else {
     const root = opts.projectRoot?.trim();
     if (!root) {
@@ -34600,30 +35053,30 @@ function upsertMcpServer(opts) {
         error: "projectRoot required for project scope (Open Folder first)"
       };
     }
-    path48 = getProjectMcpPath(root);
+    path51 = getProjectMcpPath(root);
   }
-  const current = readFile2(path48);
+  const current = readFile2(path51);
   current[name] = {
     command: opts.config.command.trim(),
     args: opts.config.args,
     env: opts.config.env,
     enabled: opts.config.enabled !== false
   };
-  writeFile(path48, current);
-  return { ok: true, path: path48 };
+  writeFile(path51, current);
+  return { ok: true, path: path51 };
 }
 function removeMcpServer(opts) {
-  const path48 = opts.scope === "user" ? getUserMcpPath() : opts.projectRoot ? getProjectMcpPath(opts.projectRoot) : null;
-  if (!path48) {
+  const path51 = opts.scope === "user" ? getUserMcpPath() : opts.projectRoot ? getProjectMcpPath(opts.projectRoot) : null;
+  if (!path51) {
     return { ok: false, error: "projectRoot required for project scope" };
   }
-  const current = readFile2(path48);
+  const current = readFile2(path51);
   if (!(opts.name in current)) {
-    return { ok: false, error: `Server "${opts.name}" not found in ${path48}` };
+    return { ok: false, error: `Server "${opts.name}" not found in ${path51}` };
   }
   delete current[opts.name];
-  writeFile(path48, current);
-  return { ok: true, path: path48 };
+  writeFile(path51, current);
+  return { ok: true, path: path51 };
 }
 var init_mcpConfigIo = __esm({
   "src/cli/mcp/mcpConfigIo.ts"() {
@@ -34654,13 +35107,16 @@ function buildComposioPreset() {
 }
 function buildQwenMmPreset() {
   const plugin = process.env.QWEN_MM_PLUGIN?.trim() || "qwen-mm-plugins-core";
+  const cap3 = plugin.replace(/^qwen-mm-plugins-/, "");
+  const spec = `qwen-mm-plugins[${cap3}] @ git+https://github.com/QwenLM/Qwen-MM-Plugins.git@${plugin}-v1.0.1`;
   return {
     id: "qwen-mm-plugins",
     servers: {
       "qwen-mm-plugins": {
         command: "uvx",
-        args: [plugin],
+        args: ["--from", spec, plugin],
         env: {
+          PYTHONIOENCODING: "utf-8",
           ...process.env.DASHSCOPE_API_KEY ? { DASHSCOPE_API_KEY: process.env.DASHSCOPE_API_KEY } : {},
           ...process.env.SERPER_API_KEY ? { SERPER_API_KEY: process.env.SERPER_API_KEY } : {}
         },
@@ -34669,8 +35125,8 @@ function buildQwenMmPreset() {
     },
     notes: [
       "Qwen-MM-Plugins \u2014 multimodal capabilities (core / video-memory / video-edit / blender / freecad) as MCP tools.",
-      "Run the upstream guided installer first: curl -fsSL https://raw.githubusercontent.com/QwenLM/Qwen-MM-Plugins/main/install.sh | bash",
-      "Windows: use WSL2 (Ubuntu); native Windows is not validated upstream.",
+      "Installs via uvx from the GitHub release tag (qwen-mm-plugins-<cap>-v1.0.1); first launch downloads ~70 packages.",
+      "Windows: verified working natively with PYTHONIOENCODING=utf-8 (WSL2 also supported upstream).",
       "Pick a capability: export QWEN_MM_PLUGIN=qwen-mm-plugins-video-memory (default: qwen-mm-plugins-core).",
       "API keys read at apply time: DASHSCOPE_API_KEY, SERPER_API_KEY (native reading works without them).",
       "Blender/FreeCAD variants: start the host app before invoking tools.",
@@ -34762,20 +35218,22 @@ __export(mcpManager_exports, {
   readMcpConfig: () => readMcpConfig,
   registerMcpTools: () => registerMcpTools
 });
-import { existsSync as existsSync29, readFileSync as readFileSync24 } from "node:fs";
-import { join as join25 } from "node:path";
-import { homedir as homedir9 } from "node:os";
-function readMcpConfig(projectRoot = process.cwd()) {
+import { existsSync as existsSync30, readFileSync as readFileSync26 } from "node:fs";
+import { join as join26 } from "node:path";
+import { homedir as homedir11 } from "node:os";
+function readMcpConfig(projectRoot = process.cwd(), opts) {
   const merged = {};
   const paths = [];
   if (process.env["ZELARI_MCP_USER"] !== "0") {
-    paths.push(join25(homedir9(), ".zelari-code", "mcp.json"));
+    paths.push(join26(homedir11(), ".zelari-code", "mcp.json"));
+  }
+  if (!opts?.skipProjectMcp) {
+    paths.push(join26(projectRoot, ".zelari", "mcp.json"));
   }
-  paths.push(join25(projectRoot, ".zelari", "mcp.json"));
   for (const p3 of paths) {
-    if (!existsSync29(p3)) continue;
+    if (!existsSync30(p3)) continue;
     try {
-      const parsed = JSON.parse(readFileSync24(p3, "utf8"));
+      const parsed = JSON.parse(readFileSync26(p3, "utf8"));
       for (const [name, cfg] of Object.entries(parsed.mcpServers ?? {})) {
         if (!cfg || typeof cfg.command !== "string" || cfg.command.length === 0) continue;
         merged[name] = cfg;
@@ -34788,7 +35246,13 @@ function readMcpConfig(projectRoot = process.cwd()) {
 async function ensureLoaded(projectRoot) {
   if (state2.loaded) return;
   state2.loaded = true;
-  const servers = readMcpConfig(projectRoot);
+  const trusted = isFolderTrusted(projectRoot);
+  if (!trusted && existsSync30(join26(projectRoot, ".zelari", "mcp.json"))) {
+    state2.warnings.push(
+      "[mcp] project .zelari/mcp.json ignored \u2014 folder not trusted (run /trust or `zelari-code --trust` to enable project MCP)"
+    );
+  }
+  const servers = readMcpConfig(projectRoot, { skipProjectMcp: !trusted });
   for (const [name, cfg] of Object.entries(servers)) {
     if (cfg.enabled === false) continue;
     if (isCuaDisabled() && isCuaMcpServerName(name)) {
@@ -34871,6 +35335,7 @@ var init_mcpManager = __esm({
     init_toolTypes();
     init_mcpClient();
     init_mcpPresets();
+    init_folderTrust();
     state2 = { loaded: false, tools: [], warnings: [], clients: [] };
   }
 });
@@ -35007,15 +35472,15 @@ __export(agentsMd_exports, {
   serializeAgentsMd: () => serializeAgentsMd,
   updateAgentsMd: () => updateAgentsMd
 });
-import { existsSync as existsSync30, readFileSync as readFileSync25, writeFileSync as writeFileSync16 } from "node:fs";
+import { existsSync as existsSync31, readFileSync as readFileSync27, writeFileSync as writeFileSync17 } from "node:fs";
 import { createHash as createHash5 } from "node:crypto";
-import { join as join26 } from "node:path";
+import { join as join27 } from "node:path";
 import { readFile as readFile3 } from "node:fs/promises";
 async function readPackageJson2(projectRoot) {
-  const path48 = join26(projectRoot, "package.json");
-  if (!existsSync30(path48)) return null;
+  const path51 = join27(projectRoot, "package.json");
+  if (!existsSync31(path51)) return null;
   try {
-    return JSON.parse(await readFile3(path48, "utf8"));
+    return JSON.parse(await readFile3(path51, "utf8"));
   } catch {
     return null;
   }
@@ -35037,8 +35502,8 @@ async function genTechStack(ctx) {
   ].join("\n");
 }
 async function genDecisions(ctx) {
-  const decisionsDir = join26(ctx.rootDir, "decisions");
-  if (!existsSync30(decisionsDir)) return "_No ADRs yet._";
+  const decisionsDir = join27(ctx.rootDir, "decisions");
+  if (!existsSync31(decisionsDir)) return "_No ADRs yet._";
   const files = ctx.storage.listMarkdown(decisionsDir).sort();
   const accepted = [];
   const proposed = [];
@@ -35063,9 +35528,9 @@ async function genDecisions(ctx) {
 }
 async function genConventions(ctx) {
   const lines = [];
-  const claudeMd = join26(ctx.projectRoot, "CLAUDE.MD");
-  if (existsSync30(claudeMd)) {
-    const content = readFileSync25(claudeMd, "utf8");
+  const claudeMd = join27(ctx.projectRoot, "CLAUDE.MD");
+  if (existsSync31(claudeMd)) {
+    const content = readFileSync27(claudeMd, "utf8");
     const match = content.match(/## Architecture rules[\s\S]+?(?=\n## |\n*$)/);
     if (match) {
       lines.push('<!-- Extracted from CLAUDE.MD "Architecture rules" -->');
@@ -35097,9 +35562,9 @@ async function genBuild(ctx) {
   ].join("\n");
 }
 async function genOpenQuestions(ctx) {
-  const path48 = join26(ctx.rootDir, "risks.md");
-  if (!existsSync30(path48)) return "_No open questions._";
-  const content = readFileSync25(path48, "utf8");
+  const path51 = join27(ctx.rootDir, "risks.md");
+  if (!existsSync31(path51)) return "_No open questions._";
+  const content = readFileSync27(path51, "utf8");
   const lines = content.split("\n");
   const questions = [];
   let currentTitle = "";
@@ -35173,9 +35638,9 @@ function titleCase(id) {
   return id.split("-").map((w) => w[0].toUpperCase() + w.slice(1)).join(" ");
 }
 async function updateAgentsMd(ctx, projectRoot) {
-  const agentsPath = join26(projectRoot, "AGENTS.MD");
-  if (existsSync30(agentsPath)) {
-    const content = readFileSync25(agentsPath, "utf8");
+  const agentsPath = join27(projectRoot, "AGENTS.MD");
+  if (existsSync31(agentsPath)) {
+    const content = readFileSync27(agentsPath, "utf8");
     const hasAnyMarker = AUTO_SECTIONS.some((id) => content.includes(MARKER_OPEN(id)));
     if (!hasAnyMarker) {
       return {
@@ -35190,8 +35655,8 @@ async function updateAgentsMd(ctx, projectRoot) {
     newSections.set(id, await GENERATORS[id](ctx));
   }
   let manualContent = "";
-  if (existsSync30(agentsPath)) {
-    const { manualBlocks } = parseAgentsMd(readFileSync25(agentsPath, "utf8"));
+  if (existsSync31(agentsPath)) {
+    const { manualBlocks } = parseAgentsMd(readFileSync27(agentsPath, "utf8"));
     manualContent = manualBlocks.after;
   } else {
     const projectName2 = projectName(projectRoot);
@@ -35207,7 +35672,7 @@ async function updateAgentsMd(ctx, projectRoot) {
       ""
     ].join("\n");
   }
-  const oldContent = existsSync30(agentsPath) ? readFileSync25(agentsPath, "utf8") : "";
+  const oldContent = existsSync31(agentsPath) ? readFileSync27(agentsPath, "utf8") : "";
   const { sections: oldSections } = parseAgentsMd(oldContent);
   const changedSections = [];
   for (const id of AUTO_SECTIONS) {
@@ -35219,7 +35684,7 @@ async function updateAgentsMd(ctx, projectRoot) {
     return { changed: false, sections: [] };
   }
   const newContent = serializeAgentsMd(manualContent, newSections);
-  writeFileSync16(agentsPath, newContent, "utf8");
+  writeFileSync17(agentsPath, newContent, "utf8");
   return { changed: true, sections: changedSections };
 }
 function hash2(s) {
@@ -35344,9 +35809,9 @@ var init_completeDesign = __esm({
 });
 
 // src/cli/workspace/projectSmoke.ts
-import { spawn as spawn9 } from "node:child_process";
-import { existsSync as existsSync31, readFileSync as readFileSync26 } from "node:fs";
-import { join as join27 } from "node:path";
+import { spawn as spawn10 } from "node:child_process";
+import { existsSync as existsSync32, readFileSync as readFileSync28 } from "node:fs";
+import { join as join28 } from "node:path";
 function pickSmokeScript(scripts) {
   if (!scripts) return null;
   for (const name of SMOKE_SCRIPT_PRIORITY) {
@@ -35354,17 +35819,17 @@ function pickSmokeScript(scripts) {
   }
   return null;
 }
-async function runProjectSmoke(projectRoot, timeoutMs = DEFAULT_TIMEOUT_MS) {
+async function runProjectSmoke(projectRoot, timeoutMs = DEFAULT_TIMEOUT_MS2) {
   if (process.env["ZELARI_SMOKE"] === "0") {
     return { ran: false, reason: "ZELARI_SMOKE=0 (disabled)" };
   }
-  const pkgPath = join27(projectRoot, "package.json");
-  if (!existsSync31(pkgPath)) {
+  const pkgPath = join28(projectRoot, "package.json");
+  if (!existsSync32(pkgPath)) {
     return { ran: false, reason: "no package.json (skipped)" };
   }
   let scripts = {};
   try {
-    const pkg = JSON.parse(readFileSync26(pkgPath, "utf8"));
+    const pkg = JSON.parse(readFileSync28(pkgPath, "utf8"));
     scripts = pkg.scripts ?? {};
   } catch {
     return { ran: false, reason: "package.json unreadable (skipped)" };
@@ -35374,12 +35839,12 @@ async function runProjectSmoke(projectRoot, timeoutMs = DEFAULT_TIMEOUT_MS) {
     return { ran: false, reason: "no typecheck/test/build script (skipped)" };
   }
   return await new Promise((resolveRun) => {
-    const child = process.platform === "win32" ? spawn9(buildCmdLine("npm.cmd", ["run", script]), {
+    const child = process.platform === "win32" ? spawn10(buildCmdLine("npm.cmd", ["run", script]), {
       cwd: projectRoot,
       stdio: ["ignore", "pipe", "pipe"],
       env: process.env,
       shell: true
-    }) : spawn9("npm", ["run", script], {
+    }) : spawn10("npm", ["run", script], {
       cwd: projectRoot,
       stdio: ["ignore", "pipe", "pipe"],
       env: process.env
@@ -35434,13 +35899,13 @@ async function runProjectSmoke(projectRoot, timeoutMs = DEFAULT_TIMEOUT_MS) {
     });
   });
 }
-var SMOKE_SCRIPT_PRIORITY, DEFAULT_TIMEOUT_MS;
+var SMOKE_SCRIPT_PRIORITY, DEFAULT_TIMEOUT_MS2;
 var init_projectSmoke = __esm({
   "src/cli/workspace/projectSmoke.ts"() {
     "use strict";
     init_cmdline();
     SMOKE_SCRIPT_PRIORITY = ["typecheck", "test", "build"];
-    DEFAULT_TIMEOUT_MS = 12e4;
+    DEFAULT_TIMEOUT_MS2 = 12e4;
   }
 });
 
@@ -35451,9 +35916,9 @@ __export(postCouncilHook_exports, {
   runImplementationVerificationHook: () => runImplementationVerificationHook,
   runPostCouncilHook: () => runPostCouncilHook
 });
-import { spawn as spawn10 } from "node:child_process";
-import { existsSync as existsSync32, readFileSync as readFileSync27 } from "node:fs";
-import { join as join28 } from "node:path";
+import { spawn as spawn11 } from "node:child_process";
+import { existsSync as existsSync33, readFileSync as readFileSync29 } from "node:fs";
+import { join as join29 } from "node:path";
 async function runCompleteDesignPostProcessor(ctx, options) {
   if (options?.runMode === "implementation") {
     return {
@@ -35464,9 +35929,9 @@ async function runCompleteDesignPostProcessor(ctx, options) {
   if (process.env["ZELARI_COMPLETE_DESIGN"] === "0") {
     return { ran: false, reason: "ZELARI_COMPLETE_DESIGN=0 (disabled)" };
   }
-  const planJsonPath2 = join28(ctx.rootDir, "plan.json");
-  const scriptPath = join28(ctx.projectRoot, "complete-design.mjs");
-  if (!existsSync32(planJsonPath2)) {
+  const planJsonPath2 = join29(ctx.rootDir, "plan.json");
+  const scriptPath = join29(ctx.projectRoot, "complete-design.mjs");
+  if (!existsSync33(planJsonPath2)) {
     return {
       ran: false,
       reason: ".zelari/plan.json missing (not design-phase)"
@@ -35474,7 +35939,7 @@ async function runCompleteDesignPostProcessor(ctx, options) {
   }
   let phaseCount = 0;
   try {
-    const parsed = JSON.parse(readFileSync27(planJsonPath2, "utf8"));
+    const parsed = JSON.parse(readFileSync29(planJsonPath2, "utf8"));
     phaseCount = Array.isArray(parsed.phases) ? parsed.phases.length : 0;
   } catch {
     return { ran: false, reason: ".zelari/plan.json corrupt" };
@@ -35482,7 +35947,7 @@ async function runCompleteDesignPostProcessor(ctx, options) {
   if (phaseCount === 0) {
     return { ran: false, reason: ".zelari/plan.json has no phases" };
   }
-  if (!existsSync32(scriptPath)) {
+  if (!existsSync33(scriptPath)) {
     try {
       const builtin = await runBuiltinCompleteDesign(ctx);
       return {
@@ -35500,7 +35965,7 @@ async function runCompleteDesignPostProcessor(ctx, options) {
     }
   }
   return await new Promise((resolveRun) => {
-    const child = spawn10(process.execPath, [scriptPath], {
+    const child = spawn11(process.execPath, [scriptPath], {
       cwd: ctx.projectRoot,
       stdio: ["ignore", "pipe", "pipe"],
       env: process.env
@@ -35666,8 +36131,8 @@ async function runPostCouncilHook(ctx, options) {
           sources: scope.sources
         } : void 0
       });
-      const path48 = writeCouncilCompletion(ctx.rootDir, completion);
-      completionHook = { ran: true, path: path48, completion };
+      const path51 = writeCouncilCompletion(ctx.rootDir, completion);
+      completionHook = { ran: true, path: path51, completion };
     } catch (err) {
       completionHook = {
         ran: true,
@@ -35705,12 +36170,12 @@ __export(councilFeedback_exports, {
 });
 import {
   promises as fs15,
-  existsSync as existsSync33,
-  readFileSync as readFileSync28,
-  writeFileSync as writeFileSync17,
-  mkdirSync as mkdirSync14
+  existsSync as existsSync34,
+  readFileSync as readFileSync30,
+  writeFileSync as writeFileSync18,
+  mkdirSync as mkdirSync15
 } from "node:fs";
-import path28 from "node:path";
+import path30 from "node:path";
 import os8 from "node:os";
 var FeedbackStore;
 var init_councilFeedback = __esm({
@@ -35721,7 +36186,7 @@ var init_councilFeedback = __esm({
       now;
       entries = [];
       constructor(options = {}) {
-        this.file = options.file ?? (process.env.ANATHEMA_COUNCIL_FEEDBACK_FILE ?? path28.join(os8.homedir(), ".tmp", "zelari-code", "council-feedback.json"));
+        this.file = options.file ?? (process.env.ANATHEMA_COUNCIL_FEEDBACK_FILE ?? path30.join(os8.homedir(), ".tmp", "zelari-code", "council-feedback.json"));
         this.now = options.now ?? Date.now;
         this.load();
       }
@@ -35814,9 +36279,9 @@ var init_councilFeedback = __esm({
       }
       // --- persistence ---------------------------------------------------------
       load() {
-        if (!existsSync33(this.file)) return;
+        if (!existsSync34(this.file)) return;
         try {
-          const raw = readFileSync28(this.file, "utf-8");
+          const raw = readFileSync30(this.file, "utf-8");
           const parsed = JSON.parse(raw);
           if (parsed && Array.isArray(parsed.entries)) {
             this.entries = parsed.entries.filter(
@@ -35827,8 +36292,8 @@ var init_councilFeedback = __esm({
         }
       }
       save() {
-        mkdirSync14(path28.dirname(this.file), { recursive: true });
-        writeFileSync17(
+        mkdirSync15(path30.dirname(this.file), { recursive: true });
+        writeFileSync18(
           this.file,
           JSON.stringify({ entries: this.entries }, null, 2),
           { encoding: "utf-8", mode: 384 }
@@ -35895,7 +36360,7 @@ import { execFile as execFile3 } from "node:child_process";
 import { promisify as promisify2 } from "node:util";
 import { mkdtempSync, rmSync as rmSync2 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
-import path29 from "node:path";
+import path31 from "node:path";
 import { randomUUID as randomUUID3 } from "node:crypto";
 async function git2(cwd, args, env) {
   const { stdout } = await execFileAsync2("git", ["-C", cwd, ...args], {
@@ -35915,8 +36380,8 @@ async function isGitRepo(cwd) {
   return await gitSafe(cwd, ["rev-parse", "--is-inside-work-tree"]) === "true";
 }
 async function withTempIndex(fn) {
-  const dir = mkdtempSync(path29.join(tmpdir2(), "zelari-ckpt-"));
-  const indexFile = path29.join(dir, "index");
+  const dir = mkdtempSync(path31.join(tmpdir2(), "zelari-ckpt-"));
+  const indexFile = path31.join(dir, "index");
   try {
     return await fn(indexFile);
   } finally {
@@ -36007,7 +36472,7 @@ async function restoreCheckpoint(cwd, id) {
     const deleted = [];
     for (const rel2 of added) {
       try {
-        rmSync2(path29.join(cwd, rel2), { force: true });
+        rmSync2(path31.join(cwd, rel2), { force: true });
         deleted.push(rel2);
       } catch {
       }
@@ -36108,7 +36573,7 @@ __export(fileBackend_exports, {
 });
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { promises as fs16 } from "node:fs";
-import * as path30 from "node:path";
+import * as path32 from "node:path";
 function tokenize(text) {
   return text.toLowerCase().split(/[^\p{L}\p{N}]+/u).filter((t) => t.length >= 3);
 }
@@ -36152,8 +36617,8 @@ var init_fileBackend = __esm({
       logPath = "";
       memoryDir = "";
       async init(projectRoot) {
-        this.memoryDir = path30.join(projectRoot, ".zelari", "memory");
-        this.logPath = path30.join(this.memoryDir, "log.jsonl");
+        this.memoryDir = path32.join(projectRoot, ".zelari", "memory");
+        this.logPath = path32.join(this.memoryDir, "log.jsonl");
         await fs16.mkdir(this.memoryDir, { recursive: true });
       }
       async add(content, metadata = {}, graph) {
@@ -36226,12 +36691,12 @@ var init_fileBackend = __esm({
 
 // src/cli/traceStore.ts
 import { promises as fs17 } from "node:fs";
-import * as path31 from "node:path";
+import * as path33 from "node:path";
 function traceDir(projectRoot) {
-  return path31.join(projectRoot, ".zelari", "trace");
+  return path33.join(projectRoot, ".zelari", "trace");
 }
 function tracePath(projectRoot, missionId) {
-  return path31.join(traceDir(projectRoot), `${missionId}.json`);
+  return path33.join(traceDir(projectRoot), `${missionId}.json`);
 }
 async function saveTrace(projectRoot, missionId, entries) {
   const dir = traceDir(projectRoot);
@@ -36266,7 +36731,7 @@ __export(zelariMission_exports, {
 });
 import { randomUUID as randomUUID5 } from "node:crypto";
 import { promises as fs18 } from "node:fs";
-import * as path32 from "node:path";
+import * as path34 from "node:path";
 function resolveMaxIterations(env = process.env) {
   const raw = env.ZELARI_MISSION_MAX_ITER;
   const n = raw ? Number.parseInt(raw, 10) : DEFAULT_MAX_ITER;
@@ -36294,10 +36759,10 @@ function isMissionAutoStart(env = process.env) {
   return env.ZELARI_MISSION_AUTO === "1";
 }
 async function writeMissionState(projectRoot, state3) {
-  const dir = path32.join(projectRoot, ".zelari");
+  const dir = path34.join(projectRoot, ".zelari");
   await fs18.mkdir(dir, { recursive: true });
   await fs18.writeFile(
-    path32.join(dir, "mission-state.json"),
+    path34.join(dir, "mission-state.json"),
     JSON.stringify(state3, null, 2) + "\n",
     "utf8"
   );
@@ -36897,7 +37362,7 @@ function safeSocketPath(socketPath) {
   return socketPath.trim();
 }
 function startPermissionBroker(socketPath, handlers, opts) {
-  const path48 = safeSocketPath(socketPath);
+  const path51 = safeSocketPath(socketPath);
   const requestTimeoutMs = opts?.requestTimeoutMs ?? PERMISSION_BROKER_DEFAULT_TIMEOUT_MS;
   const sockets = /* @__PURE__ */ new Set();
   const server = createServer((socket) => {
@@ -36997,10 +37462,10 @@ function startPermissionBroker(socketPath, handlers, opts) {
   return new Promise((resolve3, reject) => {
     const onError = (err) => reject(err);
     server.once("error", onError);
-    server.listen(path48, () => {
+    server.listen(path51, () => {
       server.removeListener("error", onError);
       resolve3({
-        socketPath: path48,
+        socketPath: path51,
         stop: () => new Promise((res) => {
           for (const s of sockets) s.destroy();
           sockets.clear();
@@ -37011,7 +37476,7 @@ function startPermissionBroker(socketPath, handlers, opts) {
             if (done) return;
             done = true;
             if (process.platform !== "win32") {
-              unlink(path48, () => res());
+              unlink(path51, () => res());
             } else {
               res();
             }
@@ -37024,11 +37489,11 @@ function startPermissionBroker(socketPath, handlers, opts) {
   });
 }
 function requestBrokerAsk(socketPath, ask, opts) {
-  const path48 = safeSocketPath(socketPath);
+  const path51 = safeSocketPath(socketPath);
   const requestTimeoutMs = opts?.requestTimeoutMs ?? PERMISSION_BROKER_DEFAULT_TIMEOUT_MS;
   const connectTimeoutMs = opts?.connectTimeoutMs ?? PERMISSION_BROKER_DEFAULT_CONNECT_TIMEOUT_MS;
   return new Promise((resolve3, reject) => {
-    const socket = connect(path48);
+    const socket = connect(path51);
     let buffer = "";
     let settled = false;
     const settle = (fn) => {
@@ -37043,7 +37508,7 @@ function requestBrokerAsk(socketPath, ask, opts) {
       settle(
         () => reject(
           new Error(
-            `permission broker unavailable at "${path48}" (connect timed out after ${connectTimeoutMs}ms)`
+            `permission broker unavailable at "${path51}" (connect timed out after ${connectTimeoutMs}ms)`
           )
         )
       );
@@ -37776,9 +38241,9 @@ __export(graphMemory_exports, {
   toGraphSnapshot: () => toGraphSnapshot
 });
 import { promises as fs19 } from "node:fs";
-import path34 from "node:path";
+import path36 from "node:path";
 function snapshotPath(cwd) {
-  return path34.join(cwd, SNAPSHOT_DIR, SNAPSHOT_FILE);
+  return path36.join(cwd, SNAPSHOT_DIR, SNAPSHOT_FILE);
 }
 function toGraphSnapshot(graph, opts) {
   const unresolved = (opts.unresolvedFindings ?? []).map((u) => ({
@@ -37805,7 +38270,7 @@ async function saveGraphSnapshot(cwd, snapshot) {
   try {
     await fs19.access(cwd);
     const file2 = snapshotPath(cwd);
-    await fs19.mkdir(path34.dirname(file2), { recursive: true });
+    await fs19.mkdir(path36.dirname(file2), { recursive: true });
     await fs19.writeFile(file2, JSON.stringify(snapshot, null, 2) + "\n", "utf8");
   } catch {
   }
@@ -37872,7 +38337,7 @@ var SNAPSHOT_DIR, SNAPSHOT_FILE, MAX_SNAPSHOT_FINDINGS_CHARS;
 var init_graphMemory = __esm({
   "src/cli/kraken/graphMemory.ts"() {
     "use strict";
-    SNAPSHOT_DIR = path34.join(".zelari", "kraken");
+    SNAPSHOT_DIR = path36.join(".zelari", "kraken");
     SNAPSHOT_FILE = "last-graph.json";
     MAX_SNAPSHOT_FINDINGS_CHARS = 400;
   }
@@ -37888,14 +38353,14 @@ var init_tentacle = __esm({
 
 // src/cli/kraken/workbench.ts
 import { promises as fs20 } from "node:fs";
-import path35 from "node:path";
+import path37 from "node:path";
 function isWorkbenchEnabled(env = process.env) {
   const v = (env.ZELARI_KRAKEN_WORKBENCH ?? "1").trim().toLowerCase();
   if (v === "0" || v === "false" || v === "no" || v === "off") return false;
   return true;
 }
 function workbenchPath(cwd, graphId) {
-  return path35.join(cwd, ".zelari", "radio", `workbench-${graphId}.md`);
+  return path37.join(cwd, ".zelari", "radio", `workbench-${graphId}.md`);
 }
 function countByStatus2(nodes) {
   const out = { pending: 0, running: 0, done: 0, error: 0, skipped: 0 };
@@ -38058,7 +38523,7 @@ var init_workbench = __esm({
         if (!this.enabled) return null;
         if (!this.dirty && this.lastWrite) return this.lastWrite;
         const out = workbenchPath(this.cwd, this.graphId);
-        await fs20.mkdir(path35.dirname(out), { recursive: true });
+        await fs20.mkdir(path37.dirname(out), { recursive: true });
         const body = this.render();
         const tmp = `${out}.${process.pid}.${Date.now()}.tmp`;
         await fs20.writeFile(tmp, body, "utf8");
@@ -38254,8 +38719,8 @@ __export(executor_exports, {
   resolveNodeTimeoutMs: () => resolveNodeTimeoutMs,
   thoroughnessForKind: () => thoroughnessForKind
 });
-import { existsSync as existsSync34 } from "node:fs";
-import path36 from "node:path";
+import { existsSync as existsSync35 } from "node:fs";
+import path38 from "node:path";
 function resolveMaxParallel(env = process.env) {
   const raw = env.ZELARI_KRAKEN_MAX_PARALLEL;
   if (raw === void 0 || raw === "") return DEFAULT_MAX_PARALLEL;
@@ -38313,7 +38778,7 @@ function isWorldModelGateEnabled(cwd, env = process.env, checksExists = defaultC
 }
 function defaultChecksExists(cwd) {
   try {
-    return existsSync34(path36.join(cwd, ".zelari", "world", "checks.json"));
+    return existsSync35(path38.join(cwd, ".zelari", "world", "checks.json"));
   } catch {
     return false;
   }
@@ -39280,7 +39745,7 @@ __export(prereqChecks_exports, {
   runPrereqChecks: () => runPrereqChecks
 });
 import { execSync, spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync35 } from "node:fs";
+import { existsSync as existsSync36 } from "node:fs";
 import { dirname as dirname7 } from "node:path";
 function isWslBashPath2(p3) {
   if (!p3 || typeof p3 !== "string") return false;
@@ -39404,7 +39869,7 @@ function agentProbeEnv() {
 }
 function existsSyncSafe2(p3) {
   try {
-    return existsSync35(p3);
+    return existsSync36(p3);
   } catch {
     return false;
   }
@@ -39651,17 +40116,17 @@ var init_prereqChecks = __esm({
 });
 
 // src/cli/plugins/prefs.ts
-import { existsSync as existsSync36, readFileSync as readFileSync29, writeFileSync as writeFileSync18, mkdirSync as mkdirSync15 } from "node:fs";
-import path39 from "node:path";
+import { existsSync as existsSync37, readFileSync as readFileSync31, writeFileSync as writeFileSync19, mkdirSync as mkdirSync16 } from "node:fs";
+import path41 from "node:path";
 import os9 from "node:os";
 function getPluginPrefsPath() {
-  return process.env.ZELARI_PLUGINS_PREFS_FILE ?? path39.join(os9.homedir(), ".tmp", "zelari-code", "plugins.json");
+  return process.env.ZELARI_PLUGINS_PREFS_FILE ?? path41.join(os9.homedir(), ".tmp", "zelari-code", "plugins.json");
 }
 function getPluginPrefs() {
   const file2 = getPluginPrefsPath();
   try {
-    if (!existsSync36(file2)) return { ...DEFAULTS2, dontAskAgain: {} };
-    const raw = readFileSync29(file2, "utf-8");
+    if (!existsSync37(file2)) return { ...DEFAULTS2, dontAskAgain: {} };
+    const raw = readFileSync31(file2, "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object" && parsed.dontAskAgain && typeof parsed.dontAskAgain === "object") {
       const clean = {};
@@ -39676,8 +40141,8 @@ function getPluginPrefs() {
 }
 function writePluginPrefs(prefs) {
   const file2 = getPluginPrefsPath();
-  mkdirSync15(path39.dirname(file2), { recursive: true });
-  writeFileSync18(file2, JSON.stringify(prefs, null, 2), {
+  mkdirSync16(path41.dirname(file2), { recursive: true });
+  writeFileSync19(file2, JSON.stringify(prefs, null, 2), {
     encoding: "utf-8",
     mode: 384
   });
@@ -39712,8 +40177,8 @@ __export(registry_exports, {
   findPlugin: () => findPlugin,
   isBinaryOnPath: () => isBinaryOnPath
 });
-import { existsSync as existsSync37 } from "node:fs";
-import path40 from "node:path";
+import { existsSync as existsSync38 } from "node:fs";
+import path42 from "node:path";
 function detectLocalBin(bin) {
   return (cwd) => {
     try {
@@ -39729,9 +40194,9 @@ function isBinaryOnPath(bin, opts = {}) {
     return false;
   }
   const platform = opts.platform ?? process.platform;
-  const exists = opts.exists ?? existsSync37;
+  const exists = opts.exists ?? existsSync38;
   const pathEnv = opts.pathEnv ?? process.env.PATH ?? "";
-  const pathMod = platform === "win32" ? path40.win32 : path40.posix;
+  const pathMod = platform === "win32" ? path42.win32 : path42.posix;
   const sep2 = platform === "win32" ? ";" : ":";
   const dirs = pathEnv.split(sep2).filter((d) => d.length > 0);
   const candidates = [bin];
@@ -39868,7 +40333,7 @@ __export(atMentions_exports, {
   extractAtMentions: () => extractAtMentions,
   hasAtMentions: () => hasAtMentions
 });
-import { existsSync as existsSync40, readFileSync as readFileSync31, statSync as statSync6 } from "node:fs";
+import { existsSync as existsSync41, readFileSync as readFileSync33, statSync as statSync6 } from "node:fs";
 import { basename as basename3, isAbsolute as isAbsolute2, relative as relative3, resolve, sep } from "node:path";
 function isImagePath(abs) {
   const ext = abs.split(".").pop()?.toLowerCase() ?? "";
@@ -39922,7 +40387,7 @@ function resolveMention(token, cwd) {
       note: "outside project root \u2014 skipped"
     };
   }
-  if (!existsSync40(abs)) {
+  if (!existsSync41(abs)) {
     return {
       raw: token,
       path: token,
@@ -39974,7 +40439,7 @@ function resolveMention(token, cwd) {
         note: `image too large (${Math.round(st.size / 1024)} KB) \u2014 path only`
       };
     }
-    const dataBase64 = readFileSync31(abs).toString("base64");
+    const dataBase64 = readFileSync33(abs).toString("base64");
     return {
       raw: token,
       path: rel2,
@@ -39985,7 +40450,7 @@ function resolveMention(token, cwd) {
     };
   }
   try {
-    const buf = readFileSync31(abs);
+    const buf = readFileSync33(abs);
     const head = buf.subarray(0, 800).toString("utf8");
     if (!isProbablyText(abs, head)) {
       return {
@@ -40083,9 +40548,9 @@ __export(triggerLock_exports, {
   releaseLock: () => releaseLock
 });
 import { promises as fs28 } from "node:fs";
-import * as path45 from "node:path";
+import * as path47 from "node:path";
 function lockPath(projectRoot) {
-  return path45.join(projectRoot, ".zelari", "trigger.lock");
+  return path47.join(projectRoot, ".zelari", "trigger.lock");
 }
 function isPidAlive(pid) {
   try {
@@ -40098,7 +40563,7 @@ function isPidAlive(pid) {
 }
 async function acquireLock(projectRoot, now = () => /* @__PURE__ */ new Date()) {
   const lp = lockPath(projectRoot);
-  const dir = path45.dirname(lp);
+  const dir = path47.dirname(lp);
   await fs28.mkdir(dir, { recursive: true });
   try {
     const raw = await fs28.readFile(lp, "utf8");
@@ -40380,6 +40845,269 @@ var init_desktopConfig = __esm({
   }
 });
 
+// src/cli/skillCategories.ts
+var CODING_CATEGORIES_LIST, CODING_CATEGORIES2;
+var init_skillCategories = __esm({
+  "src/cli/skillCategories.ts"() {
+    "use strict";
+    CODING_CATEGORIES_LIST = [
+      "plan",
+      "refactor",
+      "debug",
+      "review",
+      "test",
+      "docs",
+      "ops",
+      "git",
+      "db",
+      "maint"
+    ];
+    CODING_CATEGORIES2 = new Set(CODING_CATEGORIES_LIST);
+  }
+});
+
+// src/cli/skillConfigIo.ts
+import {
+  existsSync as existsSync43,
+  mkdirSync as mkdirSync19,
+  readdirSync as readdirSync8,
+  readFileSync as readFileSync35,
+  rmSync as rmSync4,
+  writeFileSync as writeFileSync21
+} from "node:fs";
+import { dirname as dirname9, join as join35 } from "node:path";
+import { homedir as homedir12 } from "node:os";
+function ensureBuiltinSkillsLoadedSync() {
+  if (builtinsLoaded) return;
+  for (const spec of BUILTIN_SKILL_MODULES) {
+    try {
+      require?.(spec);
+    } catch {
+    }
+  }
+}
+function getUserSkillsDir() {
+  return join35(homedir12(), ".zelari-code", "skills");
+}
+function getProjectSkillsDir(projectRoot) {
+  return join35(projectRoot, ".zelari", "skills");
+}
+function skillFilePath(dir, name) {
+  return join35(dir, name, "SKILL.md");
+}
+function classifyScope(skillPath, projectRoot) {
+  const userDir = getUserSkillsDir().replace(/\\/g, "/");
+  const norm = skillPath.replace(/\\/g, "/");
+  if (norm.startsWith(userDir + "/") || norm === userDir) {
+    return { scope: "user", writable: true };
+  }
+  if (projectRoot) {
+    const projDir = getProjectSkillsDir(projectRoot).replace(/\\/g, "/");
+    if (norm.startsWith(projDir + "/") || norm === projDir) {
+      return { scope: "project", writable: true };
+    }
+  }
+  return { scope: "compat", writable: false };
+}
+function entryFromParsed(parsed, projectRoot) {
+  const { scope, writable } = classifyScope(parsed.sourcePath, projectRoot);
+  return {
+    id: parsed.name,
+    name: parsed.name,
+    description: parsed.description,
+    category: parsed.category,
+    estimatedCost: parsed.estimatedCost,
+    requiredTools: parsed.requiredTools,
+    scope,
+    path: parsed.sourcePath,
+    body: parsed.body,
+    builtin: false,
+    writable
+  };
+}
+function entryFromBuiltin(skill) {
+  return {
+    id: skill.id,
+    name: skill.name || skill.id,
+    description: skill.description || "",
+    category: skill.category,
+    estimatedCost: skill.estimatedCost,
+    requiredTools: skill.requiredTools,
+    scope: "builtin",
+    path: null,
+    // Expose body so Desktop skill picker can expand like `/skill <id>`.
+    body: skill.systemPromptFragment || void 0,
+    builtin: true,
+    writable: false
+  };
+}
+function scanSkillsDir(dir, projectRoot, seen, out) {
+  if (!existsSync43(dir)) return;
+  let entries;
+  try {
+    entries = readdirSync8(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    const skillPath = skillFilePath(dir, entry);
+    if (!existsSync43(skillPath)) continue;
+    try {
+      const parsed = parseSkillMd(readFileSync35(skillPath, "utf8"), skillPath);
+      if (!parsed) continue;
+      if (seen.has(parsed.name)) continue;
+      seen.add(parsed.name);
+      out.push(entryFromParsed(parsed, projectRoot));
+    } catch {
+    }
+  }
+}
+function listSkillsSnapshot(projectRoot) {
+  const root = projectRoot && projectRoot.trim() ? projectRoot.trim() : null;
+  const userSkillsDir = getUserSkillsDir();
+  const projectSkillsDir = root ? getProjectSkillsDir(root) : null;
+  const skills = [];
+  const seen = /* @__PURE__ */ new Set();
+  if (root) {
+    scanSkillsDir(join35(root, ".zelari", "skills"), root, seen, skills);
+    scanSkillsDir(join35(root, ".claude", "skills"), root, seen, skills);
+    scanSkillsDir(join35(root, ".opencode", "skills"), root, seen, skills);
+  }
+  scanSkillsDir(userSkillsDir, root, seen, skills);
+  for (const s of listCodingSkills()) {
+    if (seen.has(s.id)) continue;
+    seen.add(s.id);
+    if (s.builtin) {
+      skills.push(entryFromBuiltin(s));
+    }
+  }
+  skills.sort((a, b) => {
+    const order = (s) => s === "project" ? 0 : s === "user" ? 1 : s === "compat" ? 2 : 3;
+    const d = order(a.scope) - order(b.scope);
+    if (d !== 0) return d;
+    return a.id.localeCompare(b.id);
+  });
+  return { userSkillsDir, projectSkillsDir, skills };
+}
+function serializeSkillMd(opts) {
+  const name = opts.name.trim().toLowerCase();
+  const description = opts.description.trim();
+  const body = opts.body.trim();
+  const lines = ["---", `name: ${name}`, `description: ${description}`];
+  const cat = (opts.category ?? "").trim().toLowerCase();
+  if (cat && CODING_CATEGORIES2.has(cat)) {
+    lines.push(`category: ${cat}`);
+  }
+  if (opts.tools && opts.tools.length > 0) {
+    lines.push(`tools: [${opts.tools.map((t) => t.trim()).filter(Boolean).join(", ")}]`);
+  }
+  const cost = (opts.cost ?? "").trim().toLowerCase();
+  if (cost === "low" || cost === "medium" || cost === "high") {
+    lines.push(`cost: ${cost}`);
+  }
+  lines.push("---", "", body, "");
+  return lines.join("\n");
+}
+function upsertSkill(opts) {
+  const name = opts.name.trim().toLowerCase();
+  if (!name || !NAME_RE.test(name)) {
+    return {
+      ok: false,
+      error: "Invalid skill name (use lowercase letters, digits, hyphens; max 64 chars)"
+    };
+  }
+  const description = opts.description.trim();
+  if (!description) {
+    return { ok: false, error: "description is required" };
+  }
+  const body = opts.body.trim();
+  if (!body) {
+    return { ok: false, error: "body is required" };
+  }
+  let dir;
+  if (opts.scope === "user") {
+    dir = getUserSkillsDir();
+  } else {
+    const root = opts.projectRoot?.trim();
+    if (!root) {
+      return {
+        ok: false,
+        error: "projectRoot required for project scope (Open Folder first)"
+      };
+    }
+    dir = getProjectSkillsDir(root);
+  }
+  const path51 = skillFilePath(dir, name);
+  const content = serializeSkillMd({
+    name,
+    description,
+    body,
+    category: opts.category,
+    tools: opts.tools,
+    cost: opts.cost
+  });
+  const parsed = parseSkillMd(content, path51);
+  if (!parsed) {
+    return { ok: false, error: "Generated SKILL.md failed validation" };
+  }
+  mkdirSync19(dirname9(path51), { recursive: true });
+  writeFileSync21(path51, content, "utf8");
+  return { ok: true, path: path51 };
+}
+function removeSkill(opts) {
+  const name = opts.name.trim().toLowerCase();
+  if (!name) {
+    return { ok: false, error: "name is required" };
+  }
+  let dir;
+  if (opts.scope === "user") {
+    dir = getUserSkillsDir();
+  } else {
+    const root = opts.projectRoot?.trim();
+    if (!root) {
+      return { ok: false, error: "projectRoot required for project scope" };
+    }
+    dir = getProjectSkillsDir(root);
+  }
+  const skillDir = join35(dir, name);
+  const path51 = skillFilePath(dir, name);
+  if (!existsSync43(path51) && !existsSync43(skillDir)) {
+    return { ok: false, error: `Skill "${name}" not found in ${dir}` };
+  }
+  try {
+    rmSync4(skillDir, { recursive: true, force: true });
+  } catch (err) {
+    return {
+      ok: false,
+      error: err instanceof Error ? err.message : String(err)
+    };
+  }
+  return { ok: true, path: path51 };
+}
+var NAME_RE, BUILTIN_SKILL_MODULES, builtinsLoaded;
+var init_skillConfigIo = __esm({
+  "src/cli/skillConfigIo.ts"() {
+    "use strict";
+    init_skills2();
+    init_skillsMd();
+    init_skillCategories();
+    NAME_RE = /^[a-z0-9][a-z0-9-]{0,63}$/;
+    BUILTIN_SKILL_MODULES = [
+      "@zelari/core/skills/builtin/debugging",
+      "@zelari/core/skills/builtin/docs",
+      "@zelari/core/skills/builtin/git-ops",
+      "@zelari/core/skills/builtin/planning",
+      "@zelari/core/skills/builtin/refactoring",
+      "@zelari/core/skills/builtin/review",
+      "@zelari/core/skills/builtin/testing",
+      "@zelari/core/skills/builtin/schema-loop",
+      "@zelari/core/skills/builtin/computer-use-cua",
+      "@zelari/core/skills/builtin/qwen-mm-plugins"
+    ];
+    builtinsLoaded = false;
+  }
+});
+
 // src/cli/mcp/mcpPermissionServer.ts
 import { createInterface } from "node:readline";
 import { randomUUID as randomUUID7 } from "node:crypto";
@@ -40648,36 +41376,36 @@ var init_permissionCli = __esm({
 
 // src/cli/companion/config.ts
 import {
-  existsSync as existsSync43,
-  mkdirSync as mkdirSync19,
-  readFileSync as readFileSync34,
-  writeFileSync as writeFileSync21
+  existsSync as existsSync44,
+  mkdirSync as mkdirSync20,
+  readFileSync as readFileSync36,
+  writeFileSync as writeFileSync22
 } from "node:fs";
-import { join as join35 } from "node:path";
-import { homedir as homedir11 } from "node:os";
+import { join as join36 } from "node:path";
+import { homedir as homedir13 } from "node:os";
 import { createHash as createHash6, randomBytes as randomBytes4, timingSafeEqual } from "node:crypto";
 function getZelariHome() {
-  return join35(homedir11(), ".zelari-code");
+  return join36(homedir13(), ".zelari-code");
 }
 function getCompanionConfigPath() {
-  return join35(getZelariHome(), "companion.json");
+  return join36(getZelariHome(), "companion.json");
 }
 function getCompanionTokenPath() {
-  return join35(getZelariHome(), "companion.token");
+  return join36(getZelariHome(), "companion.token");
 }
 function ensureHome() {
   const home = getZelariHome();
-  if (!existsSync43(home)) {
-    mkdirSync19(home, { recursive: true });
+  if (!existsSync44(home)) {
+    mkdirSync20(home, { recursive: true });
   }
 }
 function loadCompanionConfig() {
-  const path48 = getCompanionConfigPath();
-  if (!existsSync43(path48)) {
+  const path51 = getCompanionConfigPath();
+  if (!existsSync44(path51)) {
     return { projects: [] };
   }
   try {
-    const raw = JSON.parse(readFileSync34(path48, "utf8"));
+    const raw = JSON.parse(readFileSync36(path51, "utf8"));
     const projects = Array.isArray(raw.projects) ? raw.projects.filter(
       (p3) => p3 && typeof p3.path === "string" && p3.path.trim() && typeof (p3.id ?? p3.name) === "string"
     ).map((p3) => ({
@@ -40696,7 +41424,7 @@ function loadCompanionConfig() {
 }
 function saveCompanionConfig(cfg) {
   ensureHome();
-  writeFileSync21(
+  writeFileSync22(
     getCompanionConfigPath(),
     JSON.stringify(
       {
@@ -40715,16 +41443,16 @@ function loadOrCreateToken(explicit) {
     return { token: explicit.trim(), created: false };
   }
   ensureHome();
-  const path48 = getCompanionTokenPath();
-  if (existsSync43(path48)) {
-    const t = readFileSync34(path48, "utf8").trim();
+  const path51 = getCompanionTokenPath();
+  if (existsSync44(path51)) {
+    const t = readFileSync36(path51, "utf8").trim();
     if (t) return { token: t, created: false };
   }
   const token = randomBytes4(24).toString("base64url");
-  writeFileSync21(path48, token + "\n", "utf8");
+  writeFileSync22(path51, token + "\n", "utf8");
   try {
     const fs30 = __require("node:fs");
-    fs30.chmodSync?.(path48, 384);
+    fs30.chmodSync?.(path51, 384);
   } catch {
   }
   return { token, created: true };
@@ -40749,17 +41477,17 @@ function mergeProjects(cfg, extraPaths) {
     byId.set(p3.id, p3);
   }
   for (const raw of extraPaths) {
-    const path48 = raw.trim();
-    if (!path48) continue;
-    let id = slugFromPath(path48);
+    const path51 = raw.trim();
+    if (!path51) continue;
+    let id = slugFromPath(path51);
     let n = 2;
-    while (byId.has(id) && byId.get(id).path !== path48) {
-      id = `${slugFromPath(path48)}-${n++}`;
+    while (byId.has(id) && byId.get(id).path !== path51) {
+      id = `${slugFromPath(path51)}-${n++}`;
     }
     byId.set(id, {
       id,
-      name: slugFromPath(path48),
-      path: path48
+      name: slugFromPath(path51),
+      path: path51
     });
   }
   return [...byId.values()];
@@ -40807,11 +41535,11 @@ var init_config = __esm({
 });
 
 // src/cli/companion/runManager.ts
-import { spawn as spawn12 } from "node:child_process";
+import { spawn as spawn13 } from "node:child_process";
 import { createInterface as createInterface2 } from "node:readline";
 import { randomUUID as randomUUID8 } from "node:crypto";
-import { writeFileSync as writeFileSync22, unlinkSync as unlinkSync2 } from "node:fs";
-import { join as join36 } from "node:path";
+import { writeFileSync as writeFileSync23, unlinkSync as unlinkSync2 } from "node:fs";
+import { join as join37 } from "node:path";
 import { tmpdir as tmpdir3 } from "node:os";
 var RunManager;
 var init_runManager = __esm({
@@ -40915,15 +41643,15 @@ var init_runManager = __esm({
         }
         let historyFile;
         if (args.history && Array.isArray(args.history) && args.history.length > 0) {
-          historyFile = join36(tmpdir3(), `zelari-companion-hist-${id}.json`);
+          historyFile = join37(tmpdir3(), `zelari-companion-hist-${id}.json`);
           try {
-            writeFileSync22(historyFile, JSON.stringify(args.history), "utf8");
+            writeFileSync23(historyFile, JSON.stringify(args.history), "utf8");
             argv.push("--history-file", historyFile);
           } catch {
             historyFile = void 0;
           }
         }
-        const child = spawn12(process.execPath, argv, {
+        const child = spawn13(process.execPath, argv, {
           cwd: args.cwd,
           env: {
             ...process.env,
@@ -41042,7 +41770,7 @@ __export(serve_exports, {
   runCompanionServe: () => runCompanionServe
 });
 import { createServer as createServer2 } from "node:http";
-import { existsSync as existsSync44 } from "node:fs";
+import { existsSync as existsSync45 } from "node:fs";
 import { resolve as resolve2 } from "node:path";
 function readBody(req, max = 2e6) {
   return new Promise((resolveBody, reject) => {
@@ -41090,7 +41818,7 @@ async function runCompanionServe(opts = {}) {
   let projects = mergeProjects(fileCfg, opts.projects ?? []);
   projects = projects.filter((p3) => {
     const abs = resolve2(p3.path);
-    if (!existsSync44(abs)) {
+    if (!existsSync45(abs)) {
       process.stderr.write(
         `[zelari-code serve] skip missing project path: ${p3.path}
 `
@@ -41136,9 +41864,9 @@ async function runCompanionServe(opts = {}) {
       return;
     }
     const url2 = parseUrl(req);
-    const path48 = url2.pathname.replace(/\/+$/, "") || "/";
+    const path51 = url2.pathname.replace(/\/+$/, "") || "/";
     try {
-      if (req.method === "GET" && (path48 === "/health" || path48 === "/v1/health")) {
+      if (req.method === "GET" && (path51 === "/health" || path51 === "/v1/health")) {
         sendJson2(res, 200, {
           ok: true,
           service: "zelari-companion",
@@ -41150,18 +41878,18 @@ async function runCompanionServe(opts = {}) {
         });
         return;
       }
-      if (path48.startsWith("/v1")) {
+      if (path51.startsWith("/v1")) {
         if (!tokenMatches(token, getBearer(req))) {
           sendJson2(res, 401, { ok: false, error: "unauthorized" });
           return;
         }
       }
-      if (req.method === "GET" && path48 === "/v1/config") {
+      if (req.method === "GET" && path51 === "/v1/config") {
         const snap = buildDesktopConfigSnapshot();
         sendJson2(res, 200, { ok: true, ...snap });
         return;
       }
-      if (req.method === "GET" && path48 === "/v1/projects") {
+      if (req.method === "GET" && path51 === "/v1/projects") {
         sendJson2(res, 200, {
           ok: true,
           projects: projects.map((p3) => ({
@@ -41172,7 +41900,7 @@ async function runCompanionServe(opts = {}) {
         });
         return;
       }
-      if (req.method === "GET" && path48 === "/v1/runs") {
+      if (req.method === "GET" && path51 === "/v1/runs") {
         sendJson2(res, 200, {
           ok: true,
           active: runs.getActive(),
@@ -41190,7 +41918,7 @@ async function runCompanionServe(opts = {}) {
         });
         return;
       }
-      if (req.method === "POST" && path48 === "/v1/runs") {
+      if (req.method === "POST" && path51 === "/v1/runs") {
         const raw = await readBody(req);
         let body = {};
         try {
@@ -41237,7 +41965,7 @@ async function runCompanionServe(opts = {}) {
         });
         return;
       }
-      const eventsMatch = /^\/v1\/runs\/([^/]+)\/events$/.exec(path48);
+      const eventsMatch = /^\/v1\/runs\/([^/]+)\/events$/.exec(path51);
       if (req.method === "GET" && eventsMatch) {
         const runId = eventsMatch[1];
         const run = runs.getRun(runId);
@@ -41302,7 +42030,7 @@ async function runCompanionServe(opts = {}) {
         }, 500);
         return;
       }
-      const cancelMatch = /^\/v1\/runs\/([^/]+)\/cancel$/.exec(path48);
+      const cancelMatch = /^\/v1\/runs\/([^/]+)\/cancel$/.exec(path51);
       if (req.method === "POST" && cancelMatch) {
         const runId = cancelMatch[1];
         const result = runs.cancel(runId);
@@ -41411,26 +42139,26 @@ __export(doctor_exports, {
   runDoctor: () => runDoctor
 });
 import { execSync as execSync2 } from "node:child_process";
-import { existsSync as existsSync45, readFileSync as readFileSync35, readlinkSync, statSync as statSync7 } from "node:fs";
+import { existsSync as existsSync46, readFileSync as readFileSync37, readlinkSync, statSync as statSync7 } from "node:fs";
 import { createRequire as createRequire3 } from "node:module";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
-import path47 from "node:path";
+import path49 from "node:path";
 function findPackageRoot(start) {
   let dir = start;
   for (let i = 0; i < 6; i += 1) {
-    const candidate = path47.join(dir, "package.json");
-    if (existsSync45(candidate)) {
+    const candidate = path49.join(dir, "package.json");
+    if (existsSync46(candidate)) {
       try {
-        const pkg = JSON.parse(readFileSync35(candidate, "utf8"));
+        const pkg = JSON.parse(readFileSync37(candidate, "utf8"));
         if (pkg.name === "zelari-code") return dir;
       } catch {
       }
     }
-    const parent = path47.dirname(dir);
+    const parent = path49.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
-  return path47.resolve(__dirname3, "..", "..", "..");
+  return path49.resolve(__dirname3, "..", "..", "..");
 }
 function tryExec(cmd) {
   try {
@@ -41444,8 +42172,8 @@ function tryExec(cmd) {
 }
 function readPackageJson3() {
   try {
-    const pkgPath = path47.join(packageRoot, "package.json");
-    return JSON.parse(readFileSync35(pkgPath, "utf8"));
+    const pkgPath = path49.join(packageRoot, "package.json");
+    return JSON.parse(readFileSync37(pkgPath, "utf8"));
   } catch {
     return null;
   }
@@ -41460,8 +42188,8 @@ function checkShim(pkgName) {
   }
   const isWin = process.platform === "win32";
   const shimName = isWin ? "zelari-code.cmd" : "zelari-code";
-  const shimPath = path47.join(prefix, shimName);
-  if (!existsSync45(shimPath)) {
+  const shimPath = path49.join(prefix, shimName);
+  if (!existsSync46(shimPath)) {
     return FAIL(
       `shim not found at ${shimPath}
          fix:  npm install -g ${pkgName}@latest --force`
@@ -41470,7 +42198,7 @@ function checkShim(pkgName) {
   try {
     const st = statSync7(shimPath);
     if (isWin) {
-      const content = readFileSync35(shimPath, "utf8");
+      const content = readFileSync37(shimPath, "utf8");
       if (content.includes(`${pkgName}\\bin\\`) || content.includes(`${pkgName}/bin/`)) {
         return OK(`shim OK at ${shimPath} (${st.size} bytes)`);
       }
@@ -41488,8 +42216,8 @@ function checkShim(pkgName) {
          fix:  npm install -g ${pkgName}@latest --force`
       );
     }
-    const resolved = path47.resolve(path47.dirname(shimPath), target);
-    const expected = path47.join(
+    const resolved = path49.resolve(path49.dirname(shimPath), target);
+    const expected = path49.join(
       prefix,
       "node_modules",
       pkgName,
@@ -41528,8 +42256,8 @@ function checkNode(pkg) {
   return OK(`node ${raw}`);
 }
 function checkBundle() {
-  const bundle = path47.join(packageRoot, "dist", "cli", "main.bundled.js");
-  if (!existsSync45(bundle)) {
+  const bundle = path49.join(packageRoot, "dist", "cli", "main.bundled.js");
+  if (!existsSync46(bundle)) {
     return FAIL(
       `dist/cli/main.bundled.js missing at ${bundle}
          fix:  npm run build:cli   (then reinstall or run via tsx)`
@@ -41549,7 +42277,7 @@ function checkRuntimeDeps() {
   const missing = [];
   for (const dep of required2) {
     try {
-      const localReq = createRequire3(path47.join(packageRoot, "package.json"));
+      const localReq = createRequire3(path49.join(packageRoot, "package.json"));
       localReq.resolve(dep);
     } catch {
       missing.push(dep);
@@ -41725,7 +42453,7 @@ var init_doctor = __esm({
     "use strict";
     init_prereqChecks();
     require3 = createRequire3(import.meta.url);
-    __dirname3 = path47.dirname(fileURLToPath2(import.meta.url));
+    __dirname3 = path49.dirname(fileURLToPath2(import.meta.url));
     packageRoot = findPackageRoot(__dirname3);
     OK = (message) => ({
       ok: true,
@@ -41903,6 +42631,154 @@ var init_fixBudget = __esm({
   }
 });
 
+// src/cli/commands/inspect.ts
+var inspect_exports = {};
+__export(inspect_exports, {
+  collectInspectReport: () => collectInspectReport,
+  runInspect: () => runInspect
+});
+import path50 from "node:path";
+import { existsSync as existsSync47, readFileSync as readFileSync38, readdirSync as readdirSync9 } from "node:fs";
+import { homedir as homedir14 } from "node:os";
+async function collectInspectReport(cwd = process.cwd()) {
+  ensureBuiltinSkillsLoadedSync();
+  const snap = listSkillsSnapshot(cwd);
+  const mcp = listMcpServers(cwd);
+  const userMcpPath = path50.join(homedir14(), ".zelari-code", "mcp.json");
+  const projectMcpPath = path50.join(cwd, ".zelari", "mcp.json");
+  const globalHooks = globalHooksDir();
+  const projectHooks = projectHooksDir(cwd);
+  const projectTrusted = isFolderTrusted(cwd);
+  const skillsByScope = (scope) => snap.skills.filter((s) => s.scope === scope).length;
+  const pluginStates = await Promise.all(
+    PLUGINS.map(async (p3) => ({
+      id: p3.id,
+      label: p3.label ?? p3.id,
+      installed: await p3.detect(cwd)
+    }))
+  );
+  return {
+    schemaVersion: 1,
+    zelariVersion: getCurrentVersion(),
+    cwd,
+    platform: `${process.platform}-${process.arch}`,
+    node: process.version,
+    phase: process.env.ZELARI_PHASE ?? "build",
+    mode: process.env.ZELARI_MODE ?? "kraken",
+    trust: {
+      store: getTrustStorePath(),
+      trusted: projectTrusted,
+      folders: listTrustedFolders()
+    },
+    configSources: [
+      { path: userMcpPath, exists: existsSync47(userMcpPath) },
+      { path: projectMcpPath, exists: existsSync47(projectMcpPath) },
+      { path: path50.join(homedir14(), ".zelari-code", "provider.json"), exists: existsSync47(path50.join(homedir14(), ".zelari-code", "provider.json")) },
+      { path: path50.join(cwd, ".zelari", "AGENTS.md"), exists: existsSync47(path50.join(cwd, ".zelari", "AGENTS.md")) },
+      { path: path50.join(cwd, "AGENTS.md"), exists: existsSync47(path50.join(cwd, "AGENTS.md")) }
+    ],
+    skills: {
+      total: snap.skills.length,
+      builtin: skillsByScope("builtin"),
+      user: skillsByScope("user"),
+      project: skillsByScope("project"),
+      compat: skillsByScope("compat")
+    },
+    mcp: {
+      user: mcp.servers.filter((s) => s.scope === "user").map((s) => ({ name: s.name, enabled: s.enabled !== false })),
+      project: mcp.servers.filter((s) => s.scope === "project").map((s) => ({ name: s.name, enabled: s.enabled !== false })),
+      projectTrusted,
+      projectConfigExists: existsSync47(projectMcpPath)
+    },
+    hooks: {
+      global: {
+        path: globalHooks,
+        active: true,
+        files: listJsonFiles(globalHooks)
+      },
+      project: {
+        path: projectHooks,
+        active: projectTrusted,
+        files: listJsonFiles(projectHooks)
+      }
+    },
+    plugins: pluginStates,
+    agentsMd: findAgentsMd(cwd)
+  };
+}
+function listJsonFiles(dir) {
+  try {
+    return readdirSync9(dir).filter((f) => f.endsWith(".json")).sort();
+  } catch {
+    return [];
+  }
+}
+function findAgentsMd(cwd) {
+  const candidates = [
+    path50.join(cwd, "AGENTS.md"),
+    path50.join(cwd, ".zelari", "AGENTS.md")
+  ];
+  const found = [];
+  for (const c of candidates) {
+    if (existsSync47(c)) {
+      try {
+        const text = readFileSync38(c, "utf8");
+        found.push(`${c} (${text.length} bytes)`);
+      } catch {
+        found.push(`${c} (unreadable)`);
+      }
+    }
+  }
+  return found;
+}
+function formatHuman(r) {
+  const lines = [
+    `zelari-code inspect v${r.zelariVersion}`,
+    `  cwd:      ${r.cwd}`,
+    `  platform: ${r.platform}  node ${r.node}`,
+    `  phase:    ${r.phase}  mode: ${r.mode}`,
+    ``,
+    `trust: ${r.trust.trusted ? "TRUSTED \u2714" : "NOT TRUSTED \u2716"}  (store: ${r.trust.store})`,
+    ...r.trust.folders.map((f) => `  - ${f.path} (${f.trustedAt})`),
+    ``,
+    `skills: ${r.skills.total} total (builtin ${r.skills.builtin}, user ${r.skills.user}, project ${r.skills.project}, compat ${r.skills.compat})`,
+    ``,
+    `MCP:`,
+    `  user:    ${r.mcp.user.length ? r.mcp.user.map((m) => m.name).join(", ") : "(none)"}`,
+    `  project: ${r.mcp.projectConfigExists ? r.mcp.projectTrusted ? r.mcp.project.map((m) => m.name).join(", ") || "(configured, no servers)" : "IGNORED (folder not trusted)" : "(no .zelari/mcp.json)"}`,
+    ``,
+    `hooks:`,
+    `  global:  ${r.hooks.global.active ? "active" : "inactive"} @ ${r.hooks.global.path} (${r.hooks.global.files.length} file(s))`,
+    `  project: ${r.hooks.project.active ? "active" : "IGNORED (folder not trusted)"} @ ${r.hooks.project.path} (${r.hooks.project.files.length} file(s))`,
+    ``,
+    `plugins: ${r.plugins.length ? r.plugins.map((p3) => `${p3.id}${p3.installed ? "" : " (missing)"}`).join(", ") : "(none)"}`,
+    ``,
+    `AGENTS.md rules:`,
+    ...r.agentsMd.length ? r.agentsMd.map((a) => `  - ${a}`) : ["  (none)"]
+  ];
+  return lines.join("\n");
+}
+async function runInspect(opts = {}) {
+  const report = await collectInspectReport(opts.cwd ?? process.cwd());
+  if (opts.json) {
+    console.log(JSON.stringify(report, null, 2));
+  } else {
+    console.log(formatHuman(report));
+  }
+  return 0;
+}
+var init_inspect = __esm({
+  "src/cli/commands/inspect.ts"() {
+    "use strict";
+    init_folderTrust();
+    init_lifecycleHooks();
+    init_mcpConfigIo();
+    init_skillConfigIo();
+    init_registry3();
+    init_updater();
+  }
+});
+
 // src/cli/main.ts
 import React15 from "react";
 import { render } from "ink";
@@ -44767,15 +45643,15 @@ import { useState as useState5, useRef as useRef3, useCallback, useEffect as use
 
 // src/cli/sessionManager.ts
 init_harness();
-import { promises as fs9, existsSync as existsSync9, readFileSync as readFileSync11, writeFileSync as writeFileSync9, mkdirSync as mkdirSync4, unlinkSync, statSync } from "node:fs";
-import path12 from "node:path";
+import { promises as fs9, existsSync as existsSync9, readFileSync as readFileSync12, writeFileSync as writeFileSync9, mkdirSync as mkdirSync4, unlinkSync, statSync } from "node:fs";
+import path13 from "node:path";
 import os4 from "node:os";
 import { randomUUID } from "node:crypto";
 function getSessionBaseDir() {
-  return process.env.ANATHEMA_SESSIONS_DIR ?? path12.join(os4.homedir(), ".tmp", "zelari-code", "sessions");
+  return process.env.ANATHEMA_SESSIONS_DIR ?? path13.join(os4.homedir(), ".tmp", "zelari-code", "sessions");
 }
 function getCurrentSessionFile() {
-  return process.env.ANATHEMA_CURRENT_SESSION_FILE ?? path12.join(os4.homedir(), ".tmp", "zelari-code", "current.txt");
+  return process.env.ANATHEMA_CURRENT_SESSION_FILE ?? path13.join(os4.homedir(), ".tmp", "zelari-code", "current.txt");
 }
 async function ensureSessionDir() {
   await fs9.mkdir(getSessionBaseDir(), { recursive: true });
@@ -44784,7 +45660,7 @@ function getCurrentSessionId() {
   const file2 = getCurrentSessionFile();
   if (!existsSync9(file2)) return null;
   try {
-    const content = readFileSync11(file2, "utf-8").trim();
+    const content = readFileSync12(file2, "utf-8").trim();
     return content.length > 0 ? content : null;
   } catch {
     return null;
@@ -44792,7 +45668,7 @@ function getCurrentSessionId() {
 }
 function setCurrentSessionId(id) {
   const file2 = getCurrentSessionFile();
-  mkdirSync4(path12.dirname(file2), { recursive: true });
+  mkdirSync4(path13.dirname(file2), { recursive: true });
   writeFileSync9(file2, id, "utf-8");
 }
 function clearCurrentSessionId() {
@@ -44804,13 +45680,13 @@ function clearCurrentSessionId() {
   }
 }
 function getCurrentBranchFile() {
-  return process.env.ANATHEMA_CURRENT_BRANCH_FILE ?? path12.join(path12.dirname(getCurrentSessionFile()), "currentBranch.txt");
+  return process.env.ANATHEMA_CURRENT_BRANCH_FILE ?? path13.join(path13.dirname(getCurrentSessionFile()), "currentBranch.txt");
 }
 function getCurrentBranch() {
   const file2 = getCurrentBranchFile();
   if (!existsSync9(file2)) return null;
   try {
-    const content = readFileSync11(file2, "utf-8").trim();
+    const content = readFileSync12(file2, "utf-8").trim();
     return content.length > 0 ? content : null;
   } catch {
     return null;
@@ -44818,7 +45694,7 @@ function getCurrentBranch() {
 }
 function setCurrentBranch(name) {
   const file2 = getCurrentBranchFile();
-  mkdirSync4(path12.dirname(file2), { recursive: true });
+  mkdirSync4(path13.dirname(file2), { recursive: true });
   writeFileSync9(file2, name, "utf-8");
 }
 function newSessionId() {
@@ -44837,7 +45713,7 @@ async function listSessions() {
   for (const entry of entries) {
     if (!entry.endsWith(".jsonl")) continue;
     const id = entry.replace(/\.jsonl$/, "");
-    const filePath = path12.join(baseDir, entry);
+    const filePath = path13.join(baseDir, entry);
     try {
       const events = await readSession(filePath);
       let firstTs = 0;
@@ -44884,7 +45760,7 @@ ${lines.join("\n")}`
   return { message: `[${kind}] handled` };
 }
 async function loadSessionEvents(id) {
-  const filePath = path12.join(getSessionBaseDir(), `${id}.jsonl`);
+  const filePath = path13.join(getSessionBaseDir(), `${id}.jsonl`);
   return readSession(filePath);
 }
 
@@ -45176,15 +46052,15 @@ import { useState as useState6, useRef as useRef4, useCallback as useCallback2 }
 
 // src/cli/metrics.ts
 import { promises as fs10, existsSync as existsSync10, statSync as statSync2, renameSync, appendFileSync as appendFileSync2, mkdirSync as mkdirSync5 } from "node:fs";
-import path13 from "node:path";
+import path14 from "node:path";
 import os5 from "node:os";
 var METRICS_ROTATE_BYTES = 10 * 1024 * 1024;
 var MetricsLogger = class {
   file;
   writeQueue = Promise.resolve();
   constructor(file2) {
-    this.file = file2 ?? process.env.ANATHEMA_METRICS_FILE ?? path13.join(os5.homedir(), ".tmp", "zelari-code", "metrics.jsonl");
-    mkdirSync5(path13.dirname(this.file), { recursive: true });
+    this.file = file2 ?? process.env.ANATHEMA_METRICS_FILE ?? path14.join(os5.homedir(), ".tmp", "zelari-code", "metrics.jsonl");
+    mkdirSync5(path14.dirname(this.file), { recursive: true });
   }
   /** Fire-and-forget record append. */
   record(rec) {
@@ -47315,6 +48191,8 @@ function handleSlashCommand(text, availableSkills) {
   /index [status] \u2014 build the semantic code index for semantic_search
   /mode [kraken|council|zelari] \u2014 switch dispatch mode (same as shift+tab; agent=alias kraken)
   /kraken [sessionId] \u2014 show Kraken tentacle radio (last spawns)
+  /trust [path] \u2014 trust a folder so project MCP + project hooks load
+  /trust remove [path] \u2014 revoke folder trust
   /help \u2014 show this help
   /exit \u2014 exit the CLI
 
@@ -47803,6 +48681,23 @@ ${formatSkillList(availableSkills)}`
         message: "Usage: /state status | /state commit [label] | /state show [id] | /state restore [id] [--no-tree]\nDurable verified accumulation under .zelari/state/ (not memory RAG)."
       };
     }
+    case "trust": {
+      const first = args[0];
+      if (first === "remove" || first === "untrust") {
+        return {
+          handled: true,
+          kind: "trust_remove",
+          trustPath: args[1],
+          message: "Usage: /trust remove [path]"
+        };
+      }
+      return {
+        handled: true,
+        kind: first ? "trust_add" : "trust_status",
+        trustPath: first && first !== "." ? first : process.cwd(),
+        message: first ? "Usage: /trust [path]" : "Usage: /trust [path] | /trust remove [path]"
+      };
+    }
     case "cache": {
       const sub = (args[0] ?? "stats").toLowerCase();
       if (sub === "stats" || sub === "") {
@@ -47890,7 +48785,7 @@ ${formatSkillList(availableSkills)}`
 // src/cli/gitOps.ts
 import { execFile as execFile4 } from "node:child_process";
 import { promisify as promisify3 } from "node:util";
-import path33 from "node:path";
+import path35 from "node:path";
 var execFileAsync3 = promisify3(execFile4);
 async function git3(cwd, args) {
   try {
@@ -47936,7 +48831,7 @@ async function undoWorkingChanges(opts = {}) {
   };
 }
 function defaultProjectRoot() {
-  return path33.resolve(__dirname, "..", "..", "..");
+  return path35.resolve(__dirname, "..", "..", "..");
 }
 
 // src/cli/slashHandlers/git.ts
@@ -48213,6 +49108,45 @@ function handleCacheStats(ctx) {
   );
 }
 
+// src/cli/slashHandlers/trust.ts
+init_folderTrust();
+function resolvePath(raw) {
+  if (!raw || raw === "." || raw === "./") return process.cwd();
+  return raw;
+}
+function handleTrustStatus(ctx, target) {
+  const trusted = isFolderTrusted(target);
+  const all = listTrustedFolders();
+  const lines = [
+    `[trust] ${target}`,
+    `  status: ${trusted ? "trusted \u2714" : "NOT trusted \u2716"}`,
+    `  store:  ${getTrustStorePath()}`,
+    `  folders: ${all.length === 0 ? "(none)" : ""}`,
+    ...all.map((f) => `    - ${f.path} (${f.trustedAt})`),
+    "",
+    trusted ? "  Project MCP + project hooks are enabled for this folder." : "  Project MCP (.zelari/mcp.json) and project hooks (.zelari/hooks/) are IGNORED until you run /trust ."
+  ];
+  appendSystem(ctx.setMessages, lines.join("\n"));
+}
+function handleTrust(ctx, rawPath) {
+  const target = resolvePath(rawPath);
+  const res = trustFolder(target);
+  appendSystem(
+    ctx.setMessages,
+    `[trust] trusted ${res.path}
+  Project MCP + project hooks will load on the next session/turn (run /trust to confirm).`
+  );
+}
+function handleUntrust(ctx, rawPath) {
+  const target = resolvePath(rawPath);
+  const res = untrustFolder(target);
+  appendSystem(
+    ctx.setMessages,
+    res.removed ? `[trust] removed trust for ${target}
+  Project MCP + project hooks are now ignored for this folder.` : `[trust] ${target} was not trusted (nothing to remove).`
+  );
+}
+
 // src/cli/slashHandlers/semantic.ts
 init_semantic();
 init_provider();
@@ -48338,7 +49272,7 @@ import { promises as fs22 } from "node:fs";
 init_zod();
 init_taskTool();
 import { promises as fs21 } from "node:fs";
-import path37 from "node:path";
+import path39 from "node:path";
 import { randomBytes as randomBytes3 } from "node:crypto";
 var CsvFanoutArgsSchema = external_exports.object({
   csv_path: external_exports.string().min(1),
@@ -48432,8 +49366,8 @@ function resolveMaxConcurrency(env = process.env) {
 }
 async function runCsvFanout(args, deps, opts) {
   const start = Date.now();
-  const absCsv = path37.isAbsolute(args.csv_path) ? args.csv_path : path37.join(opts.parentCwd, args.csv_path);
-  const absOut = path37.isAbsolute(args.output_csv_path) ? args.output_csv_path : path37.join(opts.parentCwd, args.output_csv_path);
+  const absCsv = path39.isAbsolute(args.csv_path) ? args.csv_path : path39.join(opts.parentCwd, args.csv_path);
+  const absOut = path39.isAbsolute(args.output_csv_path) ? args.output_csv_path : path39.join(opts.parentCwd, args.output_csv_path);
   const { headers, rows } = await readCsv(absCsv);
   if (headers.length === 0) {
     throw new Error(`kraken_csv_fanout: ${absCsv} is empty`);
@@ -48489,7 +49423,7 @@ async function runCsvFanout(args, deps, opts) {
         errored += 1;
         errors.push(`${row[args.id_column] ?? i}: ${res.error}`);
       }
-      await fs21.mkdir(path37.dirname(absOut), { recursive: true });
+      await fs21.mkdir(path39.dirname(absOut), { recursive: true });
       await queueWrite(serializeCsv(outHeaders, outputRecords));
     }
   }
@@ -48683,7 +49617,7 @@ function splitArgs(s) {
 
 // src/cli/slashHandlers/krakenWorkbench.ts
 import { promises as fs23 } from "node:fs";
-import path38 from "node:path";
+import path40 from "node:path";
 
 // src/cli/kraken/workbenchView.ts
 var EMPTY = {
@@ -48800,14 +49734,14 @@ function formatWorkbenchForTerminal(p3) {
 
 // src/cli/slashHandlers/krakenWorkbench.ts
 async function handleKrakenWorkbench(ctx) {
-  const dir = path38.join(ctx.cwd, ".zelari", "radio");
+  const dir = path40.join(ctx.cwd, ".zelari", "radio");
   let latest = null;
   let latestMtime = 0;
   try {
     const files = await fs23.readdir(dir);
     for (const f of files) {
       if (!f.startsWith("workbench-") || !f.endsWith(".md")) continue;
-      const full = path38.join(dir, f);
+      const full = path40.join(dir, f);
       const stat = await fs23.stat(full);
       if (stat.mtimeMs > latestMtime) {
         latestMtime = stat.mtimeMs;
@@ -48824,10 +49758,10 @@ async function handleKrakenWorkbench(ctx) {
   const parsed = parseWorkbench(content);
   const rendered = formatWorkbenchForTerminal(parsed);
   if (!rendered.trim()) {
-    appendSystem(ctx.setMessages, `[kraken workbench] ${path38.basename(latest)}: (no nodes / no events yet)`);
+    appendSystem(ctx.setMessages, `[kraken workbench] ${path40.basename(latest)}: (no nodes / no events yet)`);
     return;
   }
-  appendSystem(ctx.setMessages, `[kraken workbench] ${path38.basename(latest)}:
+  appendSystem(ctx.setMessages, `[kraken workbench] ${path40.basename(latest)}:
 ${rendered}`);
 }
 
@@ -48979,8 +49913,8 @@ init_registry3();
 // src/cli/plugins/installer.ts
 init_cmdline();
 init_updater();
-import { spawn as spawn11 } from "node:child_process";
-async function installPlugin(spec, cwd, executor = spawn11) {
+import { spawn as spawn12 } from "node:child_process";
+async function installPlugin(spec, cwd, executor = spawn12) {
   const scopeFlag = spec.installScope === "global" ? "-g" : "-D";
   const args = ["install", scopeFlag, spec.npmPackage];
   let result = await runNpm2(executor, args, cwd, "shim");
@@ -49129,15 +50063,15 @@ ${result.output.split("\n").slice(-8).join("\n")}` : "";
 
 // src/cli/slashHandlers/promoteMember.ts
 import { promises as fs24 } from "node:fs";
-import path41 from "node:path";
+import path43 from "node:path";
 import os10 from "node:os";
 async function handlePromoteMember(ctx, memberId) {
   try {
     const { promoteMember: promoteMember2 } = await Promise.resolve().then(() => (init_council(), council_exports));
     const { skill, markdown } = promoteMember2(memberId);
-    const skillDir = process.env.ANATHEMA_SKILL_DIR ?? path41.join(os10.homedir(), ".tmp", "zelari-code", "skills");
+    const skillDir = process.env.ANATHEMA_SKILL_DIR ?? path43.join(os10.homedir(), ".tmp", "zelari-code", "skills");
     await fs24.mkdir(skillDir, { recursive: true });
-    const filePath = path41.join(skillDir, `${skill.id}.md`);
+    const filePath = path43.join(skillDir, `${skill.id}.md`);
     await fs24.writeFile(filePath, markdown, "utf8");
     appendSystem(
       ctx.setMessages,
@@ -49154,33 +50088,33 @@ async function handlePromoteMember(ctx, memberId) {
 }
 
 // src/cli/branchManager.ts
-import { promises as fs25, existsSync as existsSync38, readFileSync as readFileSync30, writeFileSync as writeFileSync19, mkdirSync as mkdirSync16, statSync as statSync4, rmSync as rmSync3 } from "node:fs";
-import path42 from "node:path";
+import { promises as fs25, existsSync as existsSync39, readFileSync as readFileSync32, writeFileSync as writeFileSync20, mkdirSync as mkdirSync17, statSync as statSync4, rmSync as rmSync3 } from "node:fs";
+import path44 from "node:path";
 import os11 from "node:os";
 var META_FILENAME = "meta.json";
 var SESSIONS_SUBDIR = "sessions";
 function getBranchesBaseDir() {
-  return process.env.ANATHEMA_BRANCHES_DIR ?? path42.join(os11.homedir(), ".tmp", "zelari-code", "branches");
+  return process.env.ANATHEMA_BRANCHES_DIR ?? path44.join(os11.homedir(), ".tmp", "zelari-code", "branches");
 }
 function getSessionsBaseDir() {
-  return process.env.ANATHEMA_SESSIONS_DIR ?? path42.join(os11.homedir(), ".tmp", "zelari-code", "sessions");
+  return process.env.ANATHEMA_SESSIONS_DIR ?? path44.join(os11.homedir(), ".tmp", "zelari-code", "sessions");
 }
 function branchPathFor(name, baseDir) {
-  return path42.join(baseDir, name);
+  return path44.join(baseDir, name);
 }
 function metaPathFor(name, baseDir) {
-  return path42.join(baseDir, name, META_FILENAME);
+  return path44.join(baseDir, name, META_FILENAME);
 }
 function sessionsPathFor(name, baseDir) {
-  return path42.join(baseDir, name, SESSIONS_SUBDIR);
+  return path44.join(baseDir, name, SESSIONS_SUBDIR);
 }
 function readBranchMeta(name, baseDir) {
   const metaPath = metaPathFor(name, baseDir);
-  if (!existsSync38(metaPath)) {
+  if (!existsSync39(metaPath)) {
     throw new BranchNotFoundError(`Branch "${name}" not found`);
   }
   try {
-    const raw = readFileSync30(metaPath, "utf-8");
+    const raw = readFileSync32(metaPath, "utf-8");
     const parsed = JSON.parse(raw);
     if (!parsed || typeof parsed !== "object" || typeof parsed.name !== "string" || typeof parsed.createdAt !== "number" || typeof parsed.fromSessionId !== "string") {
       throw new BranchCorruptError(`Branch "${name}" meta.json is malformed`);
@@ -49197,8 +50131,8 @@ function readBranchMeta(name, baseDir) {
 }
 function writeBranchMeta(name, baseDir, meta3) {
   const metaPath = metaPathFor(name, baseDir);
-  mkdirSync16(path42.dirname(metaPath), { recursive: true });
-  writeFileSync19(metaPath, JSON.stringify(meta3, null, 2), "utf-8");
+  mkdirSync17(path44.dirname(metaPath), { recursive: true });
+  writeFileSync20(metaPath, JSON.stringify(meta3, null, 2), "utf-8");
 }
 async function countSessions(name, baseDir) {
   const sessionsPath = sessionsPathFor(name, baseDir);
@@ -49236,7 +50170,7 @@ var SessionNotFoundError = class extends Error {
 };
 function branchExists(name, baseDir = getBranchesBaseDir()) {
   const bp = branchPathFor(name, baseDir);
-  return existsSync38(bp) && existsSync38(metaPathFor(name, baseDir));
+  return existsSync39(bp) && existsSync39(metaPathFor(name, baseDir));
 }
 async function createBranch(name, fromSessionId, baseDir = getBranchesBaseDir(), sessionsBaseDir = getSessionsBaseDir()) {
   if (!name || name.trim().length === 0) {
@@ -49248,14 +50182,14 @@ async function createBranch(name, fromSessionId, baseDir = getBranchesBaseDir(),
   if (branchExists(name, baseDir)) {
     throw new BranchAlreadyExistsError(name);
   }
-  const sourcePath = path42.join(sessionsBaseDir, `${fromSessionId}.jsonl`);
-  if (!existsSync38(sourcePath)) {
+  const sourcePath = path44.join(sessionsBaseDir, `${fromSessionId}.jsonl`);
+  if (!existsSync39(sourcePath)) {
     throw new SessionNotFoundError(`Source session "${fromSessionId}" not found at ${sourcePath}`);
   }
   const branchPath = branchPathFor(name, baseDir);
   const branchSessionsPath = sessionsPathFor(name, baseDir);
-  mkdirSync16(branchSessionsPath, { recursive: true });
-  const destPath = path42.join(branchSessionsPath, `${fromSessionId}.jsonl`);
+  mkdirSync17(branchSessionsPath, { recursive: true });
+  const destPath = path44.join(branchSessionsPath, `${fromSessionId}.jsonl`);
   await fs25.copyFile(sourcePath, destPath);
   const meta3 = {
     name,
@@ -49282,7 +50216,7 @@ async function listBranches(baseDir = getBranchesBaseDir()) {
   const results = [];
   for (const entry of entries) {
     const metaPath = metaPathFor(entry, baseDir);
-    if (!existsSync38(metaPath)) continue;
+    if (!existsSync39(metaPath)) continue;
     try {
       const meta3 = readBranchMeta(entry, baseDir);
       const sessionCount = await countSessions(entry, baseDir);
@@ -49356,14 +50290,14 @@ async function handleBranchCheckout(ctx, branchName) {
 
 // src/cli/slashHandlers/workspace.ts
 import { promises as fs26 } from "node:fs";
-import path43 from "node:path";
+import path45 from "node:path";
 async function handleWorkspaceShow(ctx, what) {
   try {
-    const zelari = path43.join(process.cwd(), ".zelari");
+    const zelari = path45.join(process.cwd(), ".zelari");
     let content;
     switch (what) {
       case "plan": {
-        const planPath = path43.join(zelari, "plan.md");
+        const planPath = path45.join(zelari, "plan.md");
         try {
           content = await fs26.readFile(planPath, "utf-8");
         } catch {
@@ -49372,7 +50306,7 @@ async function handleWorkspaceShow(ctx, what) {
         break;
       }
       case "decisions": {
-        const decisionsDir = path43.join(zelari, "decisions");
+        const decisionsDir = path45.join(zelari, "decisions");
         try {
           const files = (await fs26.readdir(decisionsDir)).filter((f) => f.endsWith(".md")).sort();
           if (files.length === 0) {
@@ -49382,7 +50316,7 @@ async function handleWorkspaceShow(ctx, what) {
 `];
             const { parseFrontmatter: parseFrontmatter2 } = await Promise.resolve().then(() => (init_storage(), storage_exports));
             for (const f of files) {
-              const raw = await fs26.readFile(path43.join(decisionsDir, f), "utf-8");
+              const raw = await fs26.readFile(path45.join(decisionsDir, f), "utf-8");
               const { meta: meta3, body } = parseFrontmatter2(raw);
               const title = meta3.title ?? body.split("\n")[0]?.replace(/^#\s*/, "").trim() ?? f;
               lines.push(`- **${f.replace(/\.md$/, "")}** [${meta3.status ?? "unknown"}] ${title}`);
@@ -49395,7 +50329,7 @@ async function handleWorkspaceShow(ctx, what) {
         break;
       }
       case "risks": {
-        const risksPath = path43.join(zelari, "risks.md");
+        const risksPath = path45.join(zelari, "risks.md");
         try {
           content = await fs26.readFile(risksPath, "utf-8");
         } catch {
@@ -49404,7 +50338,7 @@ async function handleWorkspaceShow(ctx, what) {
         break;
       }
       case "agents": {
-        const agentsPath = path43.join(process.cwd(), "AGENTS.MD");
+        const agentsPath = path45.join(process.cwd(), "AGENTS.MD");
         try {
           content = await fs26.readFile(agentsPath, "utf-8");
         } catch {
@@ -49413,7 +50347,7 @@ async function handleWorkspaceShow(ctx, what) {
         break;
       }
       case "docs": {
-        const docsDir = path43.join(zelari, "docs");
+        const docsDir = path45.join(zelari, "docs");
         try {
           const files = (await fs26.readdir(docsDir)).filter((f) => f.endsWith(".md")).sort();
           content = files.length ? `# Docs (${files.length})
@@ -49455,7 +50389,7 @@ async function handleWorkspaceReset(ctx, force) {
     return;
   }
   try {
-    const target = path43.join(process.cwd(), ".zelari");
+    const target = path45.join(process.cwd(), ".zelari");
     await fs26.rm(target, { recursive: true, force: true });
     appendSystem(ctx.setMessages, "[workspace] .zelari/ removed");
   } catch (err) {
@@ -49815,11 +50749,11 @@ function handleModelsRefresh(ctx) {
 }
 
 // src/cli/slashHandlers/skills.ts
-import path44 from "node:path";
+import path46 from "node:path";
 import os12 from "node:os";
 
 // src/cli/skillHistory.ts
-import { promises as fs27, existsSync as existsSync39, statSync as statSync5, renameSync as renameSync4, appendFileSync as appendFileSync4, mkdirSync as mkdirSync17 } from "node:fs";
+import { promises as fs27, existsSync as existsSync40, statSync as statSync5, renameSync as renameSync4, appendFileSync as appendFileSync4, mkdirSync as mkdirSync18 } from "node:fs";
 var SKILL_HISTORY_ROTATE_BYTES = 10 * 1024 * 1024;
 async function readSkillHistory(file2) {
   let raw = "";
@@ -49941,7 +50875,7 @@ function handleSkillPicker(ctx, skills, openPicker, fallbackMessage) {
   });
 }
 async function handleSkillStats(ctx, skillId) {
-  const historyFile = process.env.ANATHEMA_SKILL_HISTORY_FILE ?? path44.join(os12.homedir(), ".tmp", "zelari-code", "skill-history.jsonl");
+  const historyFile = process.env.ANATHEMA_SKILL_HISTORY_FILE ?? path46.join(os12.homedir(), ".tmp", "zelari-code", "skill-history.jsonl");
   try {
     const records = await readSkillHistory(historyFile);
     const stats = getSkillStats(records, skillId);
@@ -49957,7 +50891,7 @@ async function handleSkillCompare(ctx, ids, fallbackMessage) {
     appendSystem(ctx.setMessages, fallbackMessage ?? "[skill-compare] missing args");
     return;
   }
-  const historyFile = process.env.ANATHEMA_SKILL_HISTORY_FILE ?? path44.join(os12.homedir(), ".tmp", "zelari-code", "skill-history.jsonl");
+  const historyFile = process.env.ANATHEMA_SKILL_HISTORY_FILE ?? path46.join(os12.homedir(), ".tmp", "zelari-code", "skill-history.jsonl");
   try {
     const formatted = await compareSkillsFromFile(ids[0], ids[1], historyFile);
     appendSystem(ctx.setMessages, formatted);
@@ -50347,6 +51281,21 @@ function useSlashDispatch(params) {
       setInput("");
       return;
     }
+    if (result.kind === "trust_status") {
+      handleTrustStatus({ setMessages }, result.trustPath ?? process.cwd());
+      setInput("");
+      return;
+    }
+    if (result.kind === "trust_add") {
+      handleTrust({ setMessages }, result.trustPath ?? process.cwd());
+      setInput("");
+      return;
+    }
+    if (result.kind === "trust_remove") {
+      handleUntrust({ setMessages }, result.trustPath ?? process.cwd());
+      setInput("");
+      return;
+    }
     if (result.kind === "index_build") {
       await handleIndexBuild({ ...baseCtx, cwd: process.cwd() });
       setInput("");
@@ -51114,9 +52063,9 @@ function ContinueKey({ onContinue }) {
 init_providerConfig();
 
 // src/cli/wizard/firstRun.ts
-import { existsSync as existsSync41 } from "node:fs";
+import { existsSync as existsSync42 } from "node:fs";
 function shouldRunWizard(input) {
-  const exists = input.exists ?? existsSync41;
+  const exists = input.exists ?? existsSync42;
   if (input.hasResetConfigFlag) {
     return { shouldRun: true, reason: "--reset-config flag forced wizard" };
   }
@@ -51401,7 +52350,7 @@ init_keyStore();
 init_providerConfig();
 init_openai_compatible();
 init_phase();
-import { readFileSync as readFileSync32 } from "node:fs";
+import { readFileSync as readFileSync34 } from "node:fs";
 function parseHeadlessFlags(argv) {
   if (!argv.includes("--headless")) {
     return { options: null };
@@ -51473,7 +52422,7 @@ function parseHeadlessFlags(argv) {
         let raw = null;
         if (arg === "--history-file") {
           try {
-            raw = readFileSync32(next, "utf-8");
+            raw = readFileSync34(next, "utf-8");
           } catch {
             raw = null;
           }
@@ -51619,7 +52568,7 @@ function createStreamScrubber() {
 // src/cli/runHeadless.ts
 init_taskTool();
 import { promises as fs29 } from "node:fs";
-import path46 from "node:path";
+import path48 from "node:path";
 import { randomUUID as randomUUID6 } from "node:crypto";
 async function runHeadless(opts) {
   resetTaskSpawnCount();
@@ -51767,7 +52716,7 @@ async function runHeadlessKrakenGraph(opts, provider, model) {
   try {
     let preflightGraph;
     if (opts.runPlan && opts.runPlan.trim() !== "") {
-      const planPath = path46.join(cwd, ".zelari", "radio", `plan-${opts.runPlan}.json`);
+      const planPath = path48.join(cwd, ".zelari", "radio", `plan-${opts.runPlan}.json`);
       log(`loading pre-flight plan: ${planPath}`);
       let raw;
       try {
@@ -51807,8 +52756,8 @@ async function runHeadlessKrakenGraph(opts, provider, model) {
     log(formatKrakenGraphAscii2(graph));
     if (opts.planOnly) {
       const planId = randomUUID6();
-      const planDir = path46.join(cwd, ".zelari", "radio");
-      const planPath = path46.join(planDir, `plan-${planId}.json`);
+      const planDir = path48.join(cwd, ".zelari", "radio");
+      const planPath = path48.join(planDir, `plan-${planId}.json`);
       await fs29.mkdir(planDir, { recursive: true });
       await fs29.writeFile(planPath, JSON.stringify(graph, null, 2), "utf8");
       log(`plan-only: wrote ${planPath} (${graph.nodes.size} nodes)`);
@@ -52796,263 +53745,13 @@ init_skillsMd();
 init_skills2();
 init_updater();
 init_mcpConfigIo();
-
-// src/cli/skillConfigIo.ts
-init_skills2();
-init_skillsMd();
-import {
-  existsSync as existsSync42,
-  mkdirSync as mkdirSync18,
-  readdirSync as readdirSync7,
-  readFileSync as readFileSync33,
-  rmSync as rmSync4,
-  writeFileSync as writeFileSync20
-} from "node:fs";
-import { dirname as dirname9, join as join34 } from "node:path";
-import { homedir as homedir10 } from "node:os";
-
-// src/cli/skillCategories.ts
-var CODING_CATEGORIES_LIST = [
-  "plan",
-  "refactor",
-  "debug",
-  "review",
-  "test",
-  "docs",
-  "ops",
-  "git",
-  "db",
-  "maint"
-];
-var CODING_CATEGORIES2 = new Set(CODING_CATEGORIES_LIST);
-
-// src/cli/skillConfigIo.ts
-var NAME_RE = /^[a-z0-9][a-z0-9-]{0,63}$/;
-var BUILTIN_SKILL_MODULES = [
-  "@zelari/core/skills/builtin/debugging",
-  "@zelari/core/skills/builtin/docs",
-  "@zelari/core/skills/builtin/git-ops",
-  "@zelari/core/skills/builtin/planning",
-  "@zelari/core/skills/builtin/refactoring",
-  "@zelari/core/skills/builtin/review",
-  "@zelari/core/skills/builtin/testing",
-  "@zelari/core/skills/builtin/schema-loop",
-  "@zelari/core/skills/builtin/computer-use-cua",
-  "@zelari/core/skills/builtin/qwen-mm-plugins"
-];
-var builtinsLoaded = false;
-function ensureBuiltinSkillsLoadedSync() {
-  if (builtinsLoaded) return;
-  for (const spec of BUILTIN_SKILL_MODULES) {
-    try {
-      require?.(spec);
-    } catch {
-    }
-  }
-}
-function getUserSkillsDir() {
-  return join34(homedir10(), ".zelari-code", "skills");
-}
-function getProjectSkillsDir(projectRoot) {
-  return join34(projectRoot, ".zelari", "skills");
-}
-function skillFilePath(dir, name) {
-  return join34(dir, name, "SKILL.md");
-}
-function classifyScope(skillPath, projectRoot) {
-  const userDir = getUserSkillsDir().replace(/\\/g, "/");
-  const norm = skillPath.replace(/\\/g, "/");
-  if (norm.startsWith(userDir + "/") || norm === userDir) {
-    return { scope: "user", writable: true };
-  }
-  if (projectRoot) {
-    const projDir = getProjectSkillsDir(projectRoot).replace(/\\/g, "/");
-    if (norm.startsWith(projDir + "/") || norm === projDir) {
-      return { scope: "project", writable: true };
-    }
-  }
-  return { scope: "compat", writable: false };
-}
-function entryFromParsed(parsed, projectRoot) {
-  const { scope, writable } = classifyScope(parsed.sourcePath, projectRoot);
-  return {
-    id: parsed.name,
-    name: parsed.name,
-    description: parsed.description,
-    category: parsed.category,
-    estimatedCost: parsed.estimatedCost,
-    requiredTools: parsed.requiredTools,
-    scope,
-    path: parsed.sourcePath,
-    body: parsed.body,
-    builtin: false,
-    writable
-  };
-}
-function entryFromBuiltin(skill) {
-  return {
-    id: skill.id,
-    name: skill.name || skill.id,
-    description: skill.description || "",
-    category: skill.category,
-    estimatedCost: skill.estimatedCost,
-    requiredTools: skill.requiredTools,
-    scope: "builtin",
-    path: null,
-    // Expose body so Desktop skill picker can expand like `/skill <id>`.
-    body: skill.systemPromptFragment || void 0,
-    builtin: true,
-    writable: false
-  };
-}
-function scanSkillsDir(dir, projectRoot, seen, out) {
-  if (!existsSync42(dir)) return;
-  let entries;
-  try {
-    entries = readdirSync7(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
-  } catch {
-    return;
-  }
-  for (const entry of entries) {
-    const skillPath = skillFilePath(dir, entry);
-    if (!existsSync42(skillPath)) continue;
-    try {
-      const parsed = parseSkillMd(readFileSync33(skillPath, "utf8"), skillPath);
-      if (!parsed) continue;
-      if (seen.has(parsed.name)) continue;
-      seen.add(parsed.name);
-      out.push(entryFromParsed(parsed, projectRoot));
-    } catch {
-    }
-  }
-}
-function listSkillsSnapshot(projectRoot) {
-  const root = projectRoot && projectRoot.trim() ? projectRoot.trim() : null;
-  const userSkillsDir = getUserSkillsDir();
-  const projectSkillsDir = root ? getProjectSkillsDir(root) : null;
-  const skills = [];
-  const seen = /* @__PURE__ */ new Set();
-  if (root) {
-    scanSkillsDir(join34(root, ".zelari", "skills"), root, seen, skills);
-    scanSkillsDir(join34(root, ".claude", "skills"), root, seen, skills);
-    scanSkillsDir(join34(root, ".opencode", "skills"), root, seen, skills);
-  }
-  scanSkillsDir(userSkillsDir, root, seen, skills);
-  for (const s of listCodingSkills()) {
-    if (seen.has(s.id)) continue;
-    seen.add(s.id);
-    if (s.builtin) {
-      skills.push(entryFromBuiltin(s));
-    }
-  }
-  skills.sort((a, b) => {
-    const order = (s) => s === "project" ? 0 : s === "user" ? 1 : s === "compat" ? 2 : 3;
-    const d = order(a.scope) - order(b.scope);
-    if (d !== 0) return d;
-    return a.id.localeCompare(b.id);
-  });
-  return { userSkillsDir, projectSkillsDir, skills };
-}
-function serializeSkillMd(opts) {
-  const name = opts.name.trim().toLowerCase();
-  const description = opts.description.trim();
-  const body = opts.body.trim();
-  const lines = ["---", `name: ${name}`, `description: ${description}`];
-  const cat = (opts.category ?? "").trim().toLowerCase();
-  if (cat && CODING_CATEGORIES2.has(cat)) {
-    lines.push(`category: ${cat}`);
-  }
-  if (opts.tools && opts.tools.length > 0) {
-    lines.push(`tools: [${opts.tools.map((t) => t.trim()).filter(Boolean).join(", ")}]`);
-  }
-  const cost = (opts.cost ?? "").trim().toLowerCase();
-  if (cost === "low" || cost === "medium" || cost === "high") {
-    lines.push(`cost: ${cost}`);
-  }
-  lines.push("---", "", body, "");
-  return lines.join("\n");
-}
-function upsertSkill(opts) {
-  const name = opts.name.trim().toLowerCase();
-  if (!name || !NAME_RE.test(name)) {
-    return {
-      ok: false,
-      error: "Invalid skill name (use lowercase letters, digits, hyphens; max 64 chars)"
-    };
-  }
-  const description = opts.description.trim();
-  if (!description) {
-    return { ok: false, error: "description is required" };
-  }
-  const body = opts.body.trim();
-  if (!body) {
-    return { ok: false, error: "body is required" };
-  }
-  let dir;
-  if (opts.scope === "user") {
-    dir = getUserSkillsDir();
-  } else {
-    const root = opts.projectRoot?.trim();
-    if (!root) {
-      return {
-        ok: false,
-        error: "projectRoot required for project scope (Open Folder first)"
-      };
-    }
-    dir = getProjectSkillsDir(root);
-  }
-  const path48 = skillFilePath(dir, name);
-  const content = serializeSkillMd({
-    name,
-    description,
-    body,
-    category: opts.category,
-    tools: opts.tools,
-    cost: opts.cost
-  });
-  const parsed = parseSkillMd(content, path48);
-  if (!parsed) {
-    return { ok: false, error: "Generated SKILL.md failed validation" };
-  }
-  mkdirSync18(dirname9(path48), { recursive: true });
-  writeFileSync20(path48, content, "utf8");
-  return { ok: true, path: path48 };
-}
-function removeSkill(opts) {
-  const name = opts.name.trim().toLowerCase();
-  if (!name) {
-    return { ok: false, error: "name is required" };
-  }
-  let dir;
-  if (opts.scope === "user") {
-    dir = getUserSkillsDir();
-  } else {
-    const root = opts.projectRoot?.trim();
-    if (!root) {
-      return { ok: false, error: "projectRoot required for project scope" };
-    }
-    dir = getProjectSkillsDir(root);
-  }
-  const skillDir = join34(dir, name);
-  const path48 = skillFilePath(dir, name);
-  if (!existsSync42(path48) && !existsSync42(skillDir)) {
-    return { ok: false, error: `Skill "${name}" not found in ${dir}` };
-  }
-  try {
-    rmSync4(skillDir, { recursive: true, force: true });
-  } catch (err) {
-    return {
-      ok: false,
-      error: err instanceof Error ? err.message : String(err)
-    };
-  }
-  return { ok: true, path: path48 };
-}
+init_skillConfigIo();
 
 // src/cli/generateSkillFromUrl.ts
 init_providerConfig();
 init_keyStore();
 init_openai_compatible();
+init_skillCategories();
 var MAX_PAGE_CHARS = 24e3;
 var FETCH_TIMEOUT_MS2 = 25e3;
 var LLM_TIMEOUT_MS = 9e4;
@@ -53136,8 +53835,8 @@ function normalizeDraft(raw, sourceUrl, provider, model) {
   let name = String(o.name ?? "").trim().toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 64);
   if (!name || !/^[a-z0-9][a-z0-9-]{0,63}$/.test(name)) {
     try {
-      const path48 = new URL(sourceUrl).pathname.split("/").filter(Boolean).pop()?.replace(/\.[a-z0-9]+$/i, "").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48);
-      name = path48 && /^[a-z0-9]/.test(path48) ? path48 : "imported-skill";
+      const path51 = new URL(sourceUrl).pathname.split("/").filter(Boolean).pop()?.replace(/\.[a-z0-9]+$/i, "").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48);
+      name = path51 && /^[a-z0-9]/.test(path51) ? path51 : "imported-skill";
     } catch {
       name = "imported-skill";
     }
@@ -53412,9 +54111,30 @@ function pickRootComponent() {
     console.error(`${red}\u2717${reset} ${result.error}`);
     process.exit(1);
   }
+  if (argv.includes("--inspect") || argv.includes("inspect")) {
+    const { runInspect: runInspect2 } = (init_inspect(), __toCommonJS(inspect_exports));
+    const json2 = argv.includes("--json");
+    void runInspect2({ json: json2 }).then((code) => process.exit(code));
+    return { kind: "done" };
+  }
+  if (argv.includes("--trust")) {
+    const { trustFolder: trustFolder2 } = (init_folderTrust(), __toCommonJS(folderTrust_exports));
+    const i = argv.indexOf("--trust");
+    const target = argv[i + 1] && !argv[i + 1].startsWith("--") ? argv[i + 1] : process.cwd();
+    try {
+      const res = trustFolder2(target);
+      console.log(JSON.stringify({ ok: true, path: res.path }));
+      process.exit(0);
+    } catch (err) {
+      console.error(
+        `[zelari-code --trust] ${err instanceof Error ? err.message : String(err)}`
+      );
+      process.exit(1);
+    }
+  }
   if (argv.includes("--help") || argv.includes("-h")) {
     console.log(
-      "zelari-code \u2014 AI Council coding agent CLI.\n\nUsage: zelari-code [options]\n\nOptions:\n  --version, -v       Print version and exit\n  --help, -h          Print this help and exit\n  --doctor            Diagnose install health (shim, bundle, PATH, deps,\n                      node/git/bash in the agent shell)\n  --fix-path          Add the npm global prefix to the user PATH\n                      (Windows only; fixes 'command not found' after install)\n  --fix-budget        Set recommended ZELARI_MAX_TOOL_LOOP_HARD=180,\n                      ZELARI_MAX_TOOL_LOOP_ITERATIONS=60, ZELARI_CONTEXT_LIMIT=400000\n                      at User scope (prevents the agent stopping mid-task)\n  --permission-mcp <socket>  MCP stdio server for external agent permission prompts\n                      (spawned by claude --permission-prompt-tool)\n  --skip-checks       Skip the boot-time prerequisite check\n                      (alias for ZELARI_SKIP_PREFLIGHT=1)\n  --no-wizard         Skip the first-run wizard\n  --reset-config      Re-run the wizard (clears provider.json on commit)\n  --headless          Run a single task without mounting the TUI\n    --task <text>       Task prompt (required in headless mode)\n    --output json|plain Output format (default: json)\n    --mode kraken|council|zelari  Dispatch mode (default: kraken; agent=alias)\n    --council          Alias for --mode council\n    --phase plan|build  Work phase (default: build)\n    --provider <id>    Provider override (default: active)\n    --model <id>       Model override (default: provider default)\n  serve               Companion host for Android/remote clients (Tailscale)\n    --bind <ip>       Listen address (default: 127.0.0.1; use Tailscale IP)\n    --port <n>        Port (default: 7421)\n    --token <secret>  Bearer token (default: ~/.zelari-code/companion.token)\n    --project <path>  Allowlisted project root (repeatable)\n    --save-projects   Persist --project list to companion.json\n  --print-config      Print provider/model config as JSON (no secrets)\n  --plugins-status    JSON status of optional plugins (Playwright, eslint, \u2026)\n  --plugins-install <id>  Install plugin (playwright also fetches Chromium)\n    --cwd <path>       Workspace for -D installs (default: process.cwd())\n  --set-config        Persist provider/model/endpoint\n    --provider <id>    Set active provider\n    --model <id>       Set model for that provider\n    --endpoint <url>   Custom OpenAI-compatible base URL\n    --endpoint-clear   Remove custom endpoint override\n  --set-key           Store an API key (never printed back)\n    --provider <id>    Provider id (required)\n    --key <secret>     API key (required)\n  --discover-models   Refresh model list for a provider\n    --provider <id>    Provider (default: active)\n  --print-mcp         Print MCP server config (user + project)\n    --cwd <path>      Project root for .zelari/mcp.json\n  --set-mcp           Add/update an MCP server entry\n    --name <id>       Server name (required)\n    --command <bin>   Executable (required)\n    --args <json>     JSON array of args (optional)\n    --scope user|project  Default: user\n    --enabled true|false  Default: true\n    --cwd <path>      Required when scope=project\n  --set-mcp-preset    Install a named MCP preset (e.g. cua)\n    --preset cua      Cua Driver desktop computer-use (MCP)\n    --scope user|project  Default: user\n    --cwd <path>      Required when scope=project\n  --remove-mcp        Remove an MCP server entry\n    --name <id> --scope user|project [--cwd <path>]\n  --print-skills      Print skills (builtin + user + project)\n    --cwd <path>      Project root for .zelari/skills\n  --set-skill         Add/update a SKILL.md skill\n    --name <id>       Skill id (required)\n    --description <t> One-line description (required)\n    --body <text>     Markdown instructions (required)\n    --category <c>    plan|refactor|debug|review|test|docs|ops|git|db|maint\n    --tools <csv>     Comma-separated required tools (optional)\n    --cost <l>        low|medium|high (default: medium)\n    --scope user|project  Default: user\n    --cwd <path>      Required when scope=project\n  --remove-skill      Remove a user/project SKILL.md\n    --name <id> --scope user|project [--cwd <path>]\n  --generate-skill-from-url  Fetch URL + draft skill via model (JSON)\n    --url <https://...>  Required\n    --provider <id>   Override active provider\n    --model <name>    Override model for the selected provider\n  --print-ssh-targets Print SSH deploy/monitor targets\n  --set-ssh-target    Upsert target (--json '{...}' or flags)\n  --remove-ssh-target --id <id>\n  --test-ssh-target   --id <id>  (BatchMode ssh true)\n  --print-ssh-pubkey  --path <private-or-.pub>  (display public key)\n\nEnvironment:\n  ZELARI_NO_WIZARD=1    Skip the first-run wizard\n  ZELARI_SKIP_PREFLIGHT=1  Skip the boot prerequisite check\n  ZELARI_NO_PLUGIN_PROMPT=1  Skip the boot plugin-install prompt\n  ANATHEMA_DEV=1        Disable background update check + preflight\n"
+      "zelari-code \u2014 AI Council coding agent CLI.\n\nUsage: zelari-code [options]\n\nOptions:\n  --version, -v       Print version and exit\n  --help, -h          Print this help and exit\n  --doctor            Diagnose install health (shim, bundle, PATH, deps,\n                      node/git/bash in the agent shell)\n  --inspect [--json]  Unified project inspection (config, skills, MCP,\n                      hooks, plugins, AGENTS.md, trust status)\n  --trust [path]      Trust the cwd (or path) so project MCP + hooks load\n  --fix-path          Add the npm global prefix to the user PATH\n                      (Windows only; fixes 'command not found' after install)\n  --fix-budget        Set recommended ZELARI_MAX_TOOL_LOOP_HARD=180,\n                      ZELARI_MAX_TOOL_LOOP_ITERATIONS=60, ZELARI_CONTEXT_LIMIT=400000\n                      at User scope (prevents the agent stopping mid-task)\n  --permission-mcp <socket>  MCP stdio server for external agent permission prompts\n                      (spawned by claude --permission-prompt-tool)\n  --skip-checks       Skip the boot-time prerequisite check\n                      (alias for ZELARI_SKIP_PREFLIGHT=1)\n  --no-wizard         Skip the first-run wizard\n  --reset-config      Re-run the wizard (clears provider.json on commit)\n  --headless          Run a single task without mounting the TUI\n    --task <text>       Task prompt (required in headless mode)\n    --output json|plain Output format (default: json)\n    --mode kraken|council|zelari  Dispatch mode (default: kraken; agent=alias)\n    --council          Alias for --mode council\n    --phase plan|build  Work phase (default: build)\n    --provider <id>    Provider override (default: active)\n    --model <id>       Model override (default: provider default)\n  serve               Companion host for Android/remote clients (Tailscale)\n    --bind <ip>       Listen address (default: 127.0.0.1; use Tailscale IP)\n    --port <n>        Port (default: 7421)\n    --token <secret>  Bearer token (default: ~/.zelari-code/companion.token)\n    --project <path>  Allowlisted project root (repeatable)\n    --save-projects   Persist --project list to companion.json\n  --print-config      Print provider/model config as JSON (no secrets)\n  --plugins-status    JSON status of optional plugins (Playwright, eslint, \u2026)\n  --plugins-install <id>  Install plugin (playwright also fetches Chromium)\n    --cwd <path>       Workspace for -D installs (default: process.cwd())\n  --set-config        Persist provider/model/endpoint\n    --provider <id>    Set active provider\n    --model <id>       Set model for that provider\n    --endpoint <url>   Custom OpenAI-compatible base URL\n    --endpoint-clear   Remove custom endpoint override\n  --set-key           Store an API key (never printed back)\n    --provider <id>    Provider id (required)\n    --key <secret>     API key (required)\n  --discover-models   Refresh model list for a provider\n    --provider <id>    Provider (default: active)\n  --print-mcp         Print MCP server config (user + project)\n    --cwd <path>      Project root for .zelari/mcp.json\n  --set-mcp           Add/update an MCP server entry\n    --name <id>       Server name (required)\n    --command <bin>   Executable (required)\n    --args <json>     JSON array of args (optional)\n    --scope user|project  Default: user\n    --enabled true|false  Default: true\n    --cwd <path>      Required when scope=project\n  --set-mcp-preset    Install a named MCP preset (e.g. cua)\n    --preset cua      Cua Driver desktop computer-use (MCP)\n    --scope user|project  Default: user\n    --cwd <path>      Required when scope=project\n  --remove-mcp        Remove an MCP server entry\n    --name <id> --scope user|project [--cwd <path>]\n  --print-skills      Print skills (builtin + user + project)\n    --cwd <path>      Project root for .zelari/skills\n  --set-skill         Add/update a SKILL.md skill\n    --name <id>       Skill id (required)\n    --description <t> One-line description (required)\n    --body <text>     Markdown instructions (required)\n    --category <c>    plan|refactor|debug|review|test|docs|ops|git|db|maint\n    --tools <csv>     Comma-separated required tools (optional)\n    --cost <l>        low|medium|high (default: medium)\n    --scope user|project  Default: user\n    --cwd <path>      Required when scope=project\n  --remove-skill      Remove a user/project SKILL.md\n    --name <id> --scope user|project [--cwd <path>]\n  --generate-skill-from-url  Fetch URL + draft skill via model (JSON)\n    --url <https://...>  Required\n    --provider <id>   Override active provider\n    --model <name>    Override model for the selected provider\n  --print-ssh-targets Print SSH deploy/monitor targets\n  --set-ssh-target    Upsert target (--json '{...}' or flags)\n  --remove-ssh-target --id <id>\n  --test-ssh-target   --id <id>  (BatchMode ssh true)\n  --print-ssh-pubkey  --path <private-or-.pub>  (display public key)\n\nEnvironment:\n  ZELARI_NO_WIZARD=1    Skip the first-run wizard\n  ZELARI_SKIP_PREFLIGHT=1  Skip the boot prerequisite check\n  ZELARI_NO_PLUGIN_PROMPT=1  Skip the boot plugin-install prompt\n  ANATHEMA_DEV=1        Disable background update check + preflight\n"
     );
     process.exit(0);
   }